Extracted

• • Target

    Shipping doc.exe

  • Size

    1.1MB

  • MD5

    57406a428a9cafdc12c7daedd31174c9

  • SHA1

    7ff8556bbee4dd276f9c098b433c418d61ab1ea1

  • SHA256

    586705def5c28891fa8fd49e9e442bd119f2a2522eff11c15613ffcc31c5d446

  • SHA512

    88895c3d3fd5202358142a83de1858b51f78783e5aca4d549d7c3a6c764ab5e6d2dfb6108b5709d37bce6623952bf0e5ce571274935b3f504ed47d5e97e35ba0

  • SSDEEP

    24576:sqDEvCTbMWu7rQYlBQcBiT6rprG8anl5LntsDUlln2:sTvC/MTQYxsWR7anTLnts2l

  Score

  10^/10

  formbookph01discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2