Extracted

• • Target
    Order Inquiry.exe
  • Size 485KB
  • SHA256 db2ae6df50188c663d87f250db4509ebf1ddad5cd7bcddb6e6063e59d8a3f224
  • MD5 36d6b8effc86cfda42cf0d20a6525a13
  • SHA1 6be8e092b9423f22239b0706bb573e8976e7e8fc
  • SHA512 0eb8c3a71a93b7ccaac8b5b66d7326507f7ed6954f12068cb18cd7dcb4f49b48f7a095b5b7a20eac8301c97d6cb9be3b01c8793f3637d92b9b1d70a764b92ce3
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookdn7rratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2