Extracted

• • Target
    Payment Prove for Invoice No.126789.exe
  • Size 218KB
  • SHA256 fd4dbce199d52440961eec1b4557d51014ff2ed2278466b84925eb5f7b38c13d
  • MD5 19c2e374a191ee18466c11cefeddbe75
  • SHA1 6a6b1d342f67705a05c3eda5f8121b76e4a72e04
  • SHA512 3a94415990bacc4cb8d9c68a1e65e0bfb999fd944e161a22d5709545919143ffa344f624a212347d76364653ed0e06fe320aaff43bbbba4bbadfdf7f6deb7dc1
  • SSDEEP 3072:BtvW1h07m6MfaxOhHwlzErARHTvpyJWA3l9MwO078PMznseowDGooqRJYuEK39uj:BtT7PMixWQlvDcJKwZXowbosYPK39u0
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  discoveryformbookna10ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2