Extracted

• • Target
    Payment $5,860.exe
  • Size 308KB
  • SHA256 eea6a50b731c378e4ed72fb32ee7c2e6c15739a24e7ea742601e6b8a522785fe
  • MD5 d12b6e51d90b2eff7cf473bdf993dfdd
  • SHA1 60f6c6c7be3dbdce6703987fa8a0a5a1d7a086cc
  • SHA512 6c949440fe1c0ef118fe119b3ea289c84e17de2df266c5a819559a3baabb9cc54f20b7885d7cea28d144998a8c97732d5dcca6be665c0db565326de0a4b349fb
  • SSDEEP 6144:wBlL/74i7tjRtngT5cLQI+9ZXoewsxPEoe8kCuCDzxej8xCo:CJ97tjRBgTaLmPwbD8k7Yz04xf
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookst58ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2