Extracted

• • Target

    shipment document_for your review_2543846930.exe

  • Size

    730KB

  • MD5

    daf38969ea84ef75b59a19518ecb825c

  • SHA1

    ffad234dfc77ff46bd7872cf469823cc33c719c0

  • SHA256

    bd407e66453e00d96368122b1d8761c995aa3a9606995dbd46ec1629debb18ed

  • SHA512

    22812c7dac0d6c5344edd45b81f455945f670c656384f386cb1fe9fafa6331a7862e985374f23b4cbc7d57e2e73b890be1c539009d12f677f38a8b6831ad78cd

  • SSDEEP

    12288:uDiE3lkHMH91DzZZlEOfaNbv6dxx99WKvkdsua9cFcPVl/4A/pH:uDlkHMd1DtXANbvkt9WKusuhFcPVxVH

  Score

  10^/10

  formbookc29iratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2