Extracted

• • Target

    Payment $5,860.exe

  • Size

    308KB

  • MD5

    d12b6e51d90b2eff7cf473bdf993dfdd

  • SHA1

    60f6c6c7be3dbdce6703987fa8a0a5a1d7a086cc

  • SHA256

    eea6a50b731c378e4ed72fb32ee7c2e6c15739a24e7ea742601e6b8a522785fe

  • SHA512

    6c949440fe1c0ef118fe119b3ea289c84e17de2df266c5a819559a3baabb9cc54f20b7885d7cea28d144998a8c97732d5dcca6be665c0db565326de0a4b349fb

  • SSDEEP

    6144:wBlL/74i7tjRtngT5cLQI+9ZXoewsxPEoe8kCuCDzxej8xCo:CJ97tjRBgTaLmPwbD8k7Yz04xf

  Score

  10^/10

  formbookst58ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2