Extracted

• • Target

    PO#A91641-MSKU9953077.exe

  • Size

    428KB

  • MD5

    5ccd1492d563b11ffdfd66d51aa370b5

  • SHA1

    3a7441cb83f5ca0732e8826f164c087b077a69a5

  • SHA256

    e777d588f24e21fdcc3add6de5b93d5fb498b594a59f03d02b5a7880bc5d5180

  • SHA512

    11625c6391526fd798ed1d22b8df9a5278241b4b2ec0e37d1d8493ef5a7f1fad4f4d850c67713a431d38739a43d5b7e88394dc039de49ae986e7b215be2f5444

  • SSDEEP

    6144:cbhdbMroO/lGquzY2ZmmjrmQGnHpnP6aupTzqfU0IgDKTTVz6TRvdqs0QC+VkTfW:IbMrQHzY2ZDgR6aKiIgDQVyYAkTfg

  Score

  10^/10

  formbookergsdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2