Extracted

• • Target

    Copia de recibo..exe

  • Size

    635KB

  • MD5

    016ab34913ed274e95e44c03dade1a26

  • SHA1

    1f7308bebd668cdefba0267e89f2f746e0bd37b8

  • SHA256

    778c03b86d13fe942456d5fb5e5a41e8fd395931279afc45262c25721f208dd7

  • SHA512

    33f28193982d6f625d3a0329a75ee07b2154863dd87166ae2c42f4ac6491efc12f4cdcefe25a06a49c0b8e1cb408232212b6228bc650a7690f3cd477646b4960

  • SSDEEP

    12288:qOnbqjcNWT4/CttcoGAc29F3Klv3R5R7P+lEAbC/53byTQK3kJi:qJ8WT40tcqpL3KL53byTQK3Q

  Score

  10^/10

  formbookpi31ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2