Extracted

• • Target

    rProductSpecs.exe

  • Size

    594KB

  • MD5

    05579b705197cc4ff3728af6d4d49f08

  • SHA1

    89fb958792780a68990427aa3d8dfc9262c05dc1

  • SHA256

    cc0f366752ad8832bf26a387da04626c8db6f00a69d5a98ce5934d0db01c1329

  • SHA512

    b2bb887f3f07aa64afd7d3c6afce1532c83d380b25e0ef984ac591e3a4aac4980f18367370ddfbb0028bedc43b2ca4020f2b99fa149c75cff6e1ed7ed7b113bc

  • SSDEEP

    12288:fbqwi/iWsjKX/Covqtk1Nla6KU9HTk8WjssUD1hZfxgEqD:jqwiiW9CysDOg8fh9xC

  Score

  10^/10

  formbookhinfratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2