Extracted

• • Target

    Payment Prove for Invoice No.126789.exe

  • Size

    218KB

  • MD5

    19c2e374a191ee18466c11cefeddbe75

  • SHA1

    6a6b1d342f67705a05c3eda5f8121b76e4a72e04

  • SHA256

    fd4dbce199d52440961eec1b4557d51014ff2ed2278466b84925eb5f7b38c13d

  • SHA512

    3a94415990bacc4cb8d9c68a1e65e0bfb999fd944e161a22d5709545919143ffa344f624a212347d76364653ed0e06fe320aaff43bbbba4bbadfdf7f6deb7dc1

  • SSDEEP

    3072:BtvW1h07m6MfaxOhHwlzErARHTvpyJWA3l9MwO078PMznseowDGooqRJYuEK39uj:BtT7PMixWQlvDcJKwZXowbosYPK39u0

  Score

  10^/10

  discoveryformbookna10ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2