Extracted

• • Target
    PAYROLL LIST.exe
  • Size 1.0MB
  • SHA256 d6f3187ea8a4c0cb9e263a665487060b5b14caf184a5343b2ed928b67d16a264
  • MD5 ba4626698cabac08fd9d2440f730e80c
  • SHA1 577f8e973cb926b58dffa2ec5a0ae1f9e451f128
  • SHA512 a15b63b4d018276272dd4e2667b79a859df83df8c96ea60b1bf9471e0138b40f7f4ce6c5d63424225fd5fbe1e6c55a9afd75e084b813967db7f49c9558465eda
  • SSDEEP 24576:SAHnh+eWsN3skA4RV1Hom2KXMmHao75RAQkLXWB3ryAv5:Vh+ZkldoPK8YaoX6jQ3ryQ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookas02ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2