Extracted

• • Target

    Payment.exe

  • Size

    714KB

  • MD5

    1eca8e2ba8d4939400ef3b6f315a68f2

  • SHA1

    6729aea498f4d5d67bd78776a309cd3c7c06e3cb

  • SHA256

    2a899ee00e6f2b09c002a3dc271e3ec7d15a7c98b8a3d9500f96dfd7fe941f4a

  • SHA512

    c826420eeaa3cb9726de4a20ff92b8d66b13b9edfd625e1955d9f5d44c86ba2987686789e99dc42c4f8ec734090259e9c7c4582fba05e7d8b02f6bd899718159

  • SSDEEP

    12288:mY5Qvy6uSajv6QAcFahFRavD7R5GMYG2ucItiyE:t5QvTuSar6QgjGqGV

  Score

  10^/10

  formbookna10discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2