Extracted

• • Target
    Payment Copy.exe
  • Size 267KB
  • SHA256 cbcfd7f5e01a53f530bebf71dc07ddac59b03d2ee0f5825f541e3bf668d6abc5
  • MD5 2887f9fdbaf24615ea6835c63239e8f2
  • SHA1 fa0253b40157a5820a528d8859064343bde6f14e
  • SHA512 ff53ad4debf4c5a73a3e4827c96dcf340a9062af6a7bcb3c151e0b242cfeee51cc7a0469a27a340597eea6b2ecc9183b25270009db4629c1375e5234067836b6
  • SSDEEP 6144:PYa6W3DlkyTDcyV6NyyPGONwUUpg2za88ijpiafP9at0yDd9eC6V:PYAzlVctNyyPGvtjasxfVEBS/
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2