Extracted

• • Target

    Purchase Order.exe

  • Size

    1.1MB

  • MD5

    4d27d86542900b4beaaf54881a524abc

  • SHA1

    1e8873e999ec6868b12e05e06f1d44919e5a5227

  • SHA256

    ba968a850538ae0b7ea0a740f46df914f6662454d48b083cad0dd50f309f33c1

  • SHA512

    856790ef67a49f807b84ba666a55669fae5386b1c12e0033b10f3867bae019e35f9185c8a288b04034ad8c2d8a9adda74e73eed99aa7f155d761377aea73d1fe

  • SSDEEP

    24576:GAHnh+eWsN3skA4RV1Hom2KXMmHaw8iDzQDb5:hh+ZkldoPK8Yaw5Dm

  Score

  10^/10

  formbookbi05discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Suspicious use of SetThreadContext

  behavioral1behavioral2