Extracted

• • Target

    SWIFT Transfer (103) 022FT10230717045.exe

  • Size

    752KB

  • MD5

    dd4f4d6dc2c71e6ad5a6b0abf45f8d5e

  • SHA1

    e90bf49def5509412e3c1f10f959c7a8ce121e9a

  • SHA256

    61894dd6d947ab1237c08e4f020e6462fdc7a96903c7cf27523d4e21304c1612

  • SHA512

    aa46b3c2542b2df05bc0a3bf3e15f34c80673090ba97c1b9ab8f86fb8827e3e45ad9adf9dfbefe7aa48a1d35c4dab2ef2c11c3748ec880ec40c2cbbc453e8d39

  • SSDEEP

    12288:Mf+vUyubcW9Roj0fb/WT4UkuZKXP0s95N3KO6GUPy1h8F0XgbeOTRqymNBoIlz1g:MG8VbcW9Roj0fzW/ZacsB16NP8+7UycC

  Score

  10^/10

  formbooksn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2