Extracted

• • Target

    ConfirmBookingsexeexeexee.exe

  • Size

    762KB

  • MD5

    07927aebf90098346a547f1b9686a853

  • SHA1

    05ec914f8fe8a14e37c1786307a15021555a201b

  • SHA256

    ec0778be2b035c23fb64b29a0b1480ab8e11e6bec3ddc1f6f94dab39e35fa4fb

  • SHA512

    eab2755ab89e70906edda41923afffbf47e618bbd96bbf02cea46c28abc5aeb11c091973cd7742b22a4f926f04e2bf11e06ecc3cb4afd6fba74e4fd2bdb58fe9

  • SSDEEP

    12288:SRC6DC0xnD1Ro+ma5s5jgo3JKhbITg/1lY/MLdTB42KIJ399l:irxZm/go5Cmg/0/MLk2z19

  Score

  10^/10

  formbookhe2aratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2