Extracted

• • Target
    Proforma Invoice#2796_xlsx.exe
  • Size 241KB
  • SHA256 add90f420c37b1391d4e3c22020c664c36a0dc0e0b6c43bfcc2a5f092fa18f0c
  • MD5 1aa9f8e1312459e787e981d64d6c72ef
  • SHA1 ec148f7b11b618bb676ca7466356bbe8bb786ea7
  • SHA512 69c4af51f23e0cf45651ba6c97ee803ebe9368080af962d86b5f26b13e46e5236be57969b56ea3cd17a9a81ece35a5e50b918904fe58cb8005fc0285359d005a
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookr75hratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2