Extracted

• • Target
    Shipment Deatails BL and INV222010736.exe
  • Size 214KB
  • SHA256 7e87b1cbc2d22e69597d3153f5a1ba364483bf06f8a755d12d5b56479b1be448
  • MD5 58baac8dd36307b4d5969cf39b1447b0
  • SHA1 64248f20389e63596d42175d94feb8db12cefc13
  • SHA512 81d12044506dc3bfda2b470fd7f91631cc3006c15875483ed168065668bc5375a6791f3f7a43a19f560c8c1eeeea9a6288d8335f3e03662a762a018ed3042f24
  • SSDEEP 6144:qweEpo6qhTAdITq5XJeSNeuk9Q39Vs9VJu7T:b0FAdITMJlAuAQM9S
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksm28ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2