Extracted

• • Target
    Purchase Order#44231.exe
  • Size 701KB
  • SHA256 45369218b88d34e6bc3164318250c39c39dbde9b2a40b5c0d8dde6a3abf819ab
  • MD5 b8185fd04dbe1c2ef2ec8fbabbb18632
  • SHA1 acf9748a3056ae157741c7431408b72e32d98c35
  • SHA512 a4f4480d21bd27598397195b62033eb311928c32992b75aef214e3810a9ebdd310c9267cdd62145bf837e9c1dadf2e94b927c54f72fb64d0d21123c697507139
  • SSDEEP 12288:CB1oVeonVJVwPOm13aoanwlDfokYYHzDhlVM8G25LRAFtx8oZ886Tgpm6vv9QkR:go5nWra4lDfoklBlVMKRAnHITgQ6vvF
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookvr01ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2