Extracted

• • Target

    INVS #14320023.exe

  • Size

    832KB

  • MD5

    5e87bb63fb7409f0de2dbc75fb2500a4

  • SHA1

    5d3d56dfa64c89905fcf0b4386fca6eb2bb452de

  • SHA256

    9cd7ca54fc2b418d2f82093ed798cdd02478830c5b3fb956e59dd2d325e55682

  • SHA512

    54bf90406ba1a71b5e824173e54a94f924301c8d0fefc254872400fb6e2dafe5deff1c5bc6f4df4f2f0feaca131e24caa18e46bd98bac9ff2b0ec1fcb1cfff55

  • SSDEEP

    12288:0zAuodiJGRTwdW1bjsMluDOmaPrkTQWvmi8suUq2Lz3Xp2cHUwJ8ER06nghD:aoYJTsVpuDOmkomsBz3Xp2qJjR06n

  Score

  10^/10

  formbookdr62ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2