Extracted

• • Target
    staff record or employee record.exe
  • Size 1.0MB
  • SHA256 261455d96e8709457efeddf1998e7c1f7e6c333551eea1ada7506ffae627003a
  • MD5 6b8beca73758b6a021ba6d613207073f
  • SHA1 b14b8a3983889d2641e13d9f0dbdef28ae5fc3d3
  • SHA512 7a4ecac3b690037783c21bf2553e068c08d260a86bd8fa5fd821808255352deca9ee63e6cbdc65c553e33ceadb6997019b319ac182dc287c0c7b195ec7a1c351
  • SSDEEP 24576:VAHnh+eWsN3skA4RV1Hom2KXMmHahltqn1UyL6XdaruGG5:Eh+ZkldoPK8YahynayLkdaSH
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookas02ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2