Extracted

• • Target

    Payment.exe

  • Size

    296KB

  • MD5

    31808af627d36a5b02041a7d365945dd

  • SHA1

    c486e4a71bf2ed2a44181062cc661e4f495174f1

  • SHA256

    9b11fa3cfa0acdd01be3595fba22f7b38c333e7ec8da88228c971735913bb6f7

  • SHA512

    60ee0ca493d3f12cfb43d82fa5d0be5b9c243fa1ba28b7432691375107e06622d2a708b7b04720508e5ddbb594c467b7e428b05a56962f28bd1bd48350f3e37a

  • SSDEEP

    6144:0Ya6yPkz8b7PQE9piBvwcOp7di1hBcRP7WeCVmRgpC0YyXe4QH9cYeeDT0Nh:0YSkwbcVBJOp7diLBcRTGVmOpC7Ea+YM

  Score

  10^/10

  formbookui16ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2