Extracted

• • Target

    Payment_Advice.exe

  • Size

    815KB

  • MD5

    05a028bf7e8b4118a97a57552fc4ba0c

  • SHA1

    9e71f8d3fd4bddb603c4c1803c867cade9be7a83

  • SHA256

    8d692269e00163075c2d1bdeea0d8fe0ebb06c791233f692fa76e766095ec3ad

  • SHA512

    df27cb22cbd3ee8faa970ce11217ac408c5e91e6cb4f81ad9f50b520cdebc216fee99ac022c41db449981ceadf5fdd4516b536641dbaf5a291125053b484a867

  • SSDEEP

    12288:PYHdm1fBr+IwICEMytGbPGcbXDbE1Qla6RgVcP/7kvDxul+arudZt7dLBU37eimx:PyAiIlCPtfIv9XTp9Be7OqX5y6

  Score

  10^/10

  formbooktmodiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2