Extracted

• • Target

    Release pending bookings now.exe

  • Size

    1.0MB

  • MD5

    3bef2dbbf3e0ac085648e48ef452773b

  • SHA1

    b28b14b6c2e553491c800ef28f65e5f7cf1fee8b

  • SHA256

    041e8def9ed010055a5b366d501d80f49601e6c8650470c7163addb52a45e634

  • SHA512

    6ffba388a9874fa10f685c5409616f4bcd575308dfbbfb2279b9989fe7cec224a9412b3acd11e1d69e3085892c05e2352411bb797f53db220532b2d998ce4693

  • SSDEEP

    12288:MNMN0wkqh+X0K2o1K7TIwbgLUUFf23QhDcqo3YuoacafT1Bs/:8OhUR8TlgoMZckHac4Q

  Score

  10^/10

  formbookhe2aratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2