Extracted

• • Target
    EUR 17,970.25.exe
  • Size 245KB
  • SHA256 369de2afba1e4a4807ac66f57dfb436ec13cd46a5c09f6a4d7faedc788d04be7
  • MD5 a1980b90da55148b699576f9cb0ea81f
  • SHA1 d3b7e4b5bc71b2079c34c3c87a097930250714ac
  • SHA512 ee0e3c37856b979563e412bcc668112816a3c2a501f5a659bda4f77dcb66c5617b5eeab92baa0adf6b27c7486434a7f19b0aa2ed430c363264f29d9a62d66542
  • SSDEEP 6144:/Ya6zgH04XJCrOIbe73C8PMR2UfzRkLhMREsty+3m:/YJgdXBIbeYcneH8+W
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2