Extracted

• • Target

    Credit Card & Booking details.exe

  • Size

    1.0MB

  • MD5

    27db728c69c96de67c4ad3863abe33a9

  • SHA1

    5786e68382eb6eec432ca8a3109f61242b4c03d0

  • SHA256

    9e38c0c3c516583da526016c4c6a671c53333d3d156562717db79eac63587522

  • SHA512

    696100874eb5c1e65b81fd704afcae455c0f1d9a896d6050d4f35a7873e921348386c59ed8494fc48aed95bb8390f37026079de7039e2776646aaae4e7844cd2

  • SSDEEP

    6144:TV9VhXLMjb8MUYTygw2CMgAHVoKStnCX7QyKGk8Pu5rcyOREjCGcMdRoYfTgvzzg:erhStC4Gwe1nMdRoYf7rTmeh6ZMGka9

  Score

  10^/10

  formbookt052discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2