Extracted

• • Target
    Payment Notice.exe
  • Size 754KB
  • SHA256 a20feedc1d28aae492c75dfbbfd363d40fc7aa5e3d99392c80d1db9b85617563
  • MD5 af4dd0ac8dcb000fd9247a4c6bb1b89e
  • SHA1 3e5f7c6c42721dfe5dab1c49204a08412fc4a39a
  • SHA512 2c5ab6685d9742909ef1b8a04b8cf5168d3e1094843c95dd19b55055d9e4c6188c4c022f41cbc99c1dfe6664e04b27aaca2572e5b8db402ac7f8f3821000122f
  • SSDEEP 12288:7/NBkfDyHsqueCcbfu+6jsDnFNXVdy4DA+FYoduHB0yk2vf3S431cconBuOhjSX:7/gxqt7G+Gs/XNE+FWh0yk2vf3l31cct
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksz17ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2