Extracted

• • Target

    Payment Remittance Advice.exe

  • Size

    573KB

  • MD5

    a0eae724a324d168ea7f600be5ca3984

  • SHA1

    107fdd58bfa83415e8359e22dcd3710a006e4dfc

  • SHA256

    fbcd0824d723107fbf65f4d82506544ff6514364e745242e74a8d7f86d16575f

  • SHA512

    c6a57ee61657ecc8668415b6c59e85a99f10ca30e3ec2313fee0756596b55867c85335ed9ae6bf4aacf4aa697580c14720b7b0921cd98c5d87db7ded16119b15

  • SSDEEP

    12288:xnrTfq5uTjWegOT/oWiT9iIf7G7LyvNr/jh0uILNS0T:xnXfqoTKdweT9io7kLk5/jy/LN

  Score

  10^/10

  formbookin62ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2