Extracted

• • Target
    REVISED SHIPMENT.exe
  • Size 553KB
  • SHA256 44dd86acbfa3789aec858cc6e64db784622bc6c71e6c32909cfcbcacb743e60a
  • MD5 4398c6405925b0de2908a02a7596906d
  • SHA1 19d17723fc278d7cd02fe2e71d0f0f004dd628eb
  • SHA512 8cb0bb6d581d33e20847428fd30da76263f54fec2a5e49fa380a92305d86e4b8361a1aad2298057d0464198f51ebc82728e4891d77d1ba8ac8c55db220719a9f
  • SSDEEP 12288:7k/89jaEulO2Iq6TpKa5D1W4QBXpbCqI6psblvjjBU+YBLMT9MK:7k0lJulvL6FKaA7CNjjBfYFMT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooks0g5ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2