Extracted

• • Target

    invoice.exe

  • Size

    926KB

  • MD5

    f93b86ab785cc1422188c476d3483ad5

  • SHA1

    cb8e9cedad42afbf0a32cdc58643450fd149e6ad

  • SHA256

    6217071ee755bb3de9914c5ee71161ed5666acd77c7cb6bd972d465707bf0613

  • SHA512

    b7161e145dcf2ab24816866980f8afb42f0535e75a66c870c86f043140580203d94bd754ee35a52f2dc6722d282fdf48aa6f87b85ec7d97c8a6b80efc3258c63

  • SSDEEP

    12288:D1PDogOtA1MUII0a6PCKv3rBtOpxP2eZrW2uvMrxJ8mJAsjFmR00lqTjgidAA:STUIIN6PCKCpxDrFyOxJ8aAwAgTjjA

  Score

  10^/10

  formbooke14eratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2