Extracted

• • Target
    revised order.exe
  • Size 664KB
  • SHA256 02b060c393fbc76a082ef0411f28e2be60bce1af80ea2df91f003e9b8a762b88
  • MD5 cc9da457b3759124ae37ab6ed050bddf
  • SHA1 134c076acb349bc827c28e486cc7835cdbb5c3de
  • SHA512 f471ae201c8f4082decfa81e037b5d4e7bfab53d201c07c44e7f41deda62a3f51273d358865ac2657f1afa3bc20837dedf79c14dd15e6ecafc24900007a78996
  • SSDEEP 12288:Y1o0b1mpSNDKdUv67i5hlWA8U+FgJECQqO9mom:0rNvD5hMABMC3O
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookm82ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2