Extracted

• • Target
    Payment Notice.exe
  • Size 694KB
  • SHA256 3a5a2cf364aca0c9dcf7b760be3c8e9cff4f5ee3b3d1571a94d5f149e81a37d1
  • MD5 99ea31536fd5268f539b5ee5c19276fb
  • SHA1 eb275e0f761385b197d44a98c106bda0c0eaee79
  • SHA512 b3ea2736669c7eb22dd50606d78b145b98ebb95ef3eab9615a4969d59ee9f05d6bc67a069eaab1cf8d635f75e9042a563190d6498d758ac3fcfecebaa1c64c54
  • SSDEEP 12288:4SaQ+QTuTbEIObCnIkthdSYSI/I2oWeh3ih9HvA:v+Q9IOb0hdTd/+BYTo
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksz17ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2