Extracted

• • Target
    Remittance.exe
  • Size 712KB
  • SHA256 05d10f03be1265543cb1dd13bd493f52de93c6ccceef98fc3ad9f2cd55930ca0
  • MD5 0bc274c88897709530562fd339d891ac
  • SHA1 9a7b1c1920f66e30ee441032c4c848a8cab94c59
  • SHA512 75f558cbb427f7df44e98ff91d437b0bc5b51ae381d08dfb8869b2a8ac59621460f64960b2d47ecd53cefb80607e854a1e2603f9503c83d3cdee4929a0ba0aac
  • SSDEEP 12288:ptmVwu9SFP5x30aO/qtbqdN82PiIUH4L8ERFf:Fu9SFPLEjStbz2PixwjR
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookhe2aratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2