Extracted

• • Target

    New Purchase Order.exe

  • Size

    1.1MB

  • MD5

    eaa202b477e3f9399c7712b5353e881c

  • SHA1

    cea68d5b7243d6f5adbfd39e20f7df7344c148de

  • SHA256

    5ccd3ceebd40c9b49d776f317256242319217ebf481bcf681559e44694612f65

  • SHA512

    3ad512dbece5756ac3ddbc561e38c3962615d69fa1e2852e1c980a75499cff8a97c44a3023af4f7b4e2ad166bdd00840fd5f474eebf6c10d020f986aea42db01

  • SSDEEP

    24576:MqDEvCTbMWu7rQYlBQcBiT6rprG8aLszADbt7:MTvC/MTQYxsWR7aLszw5

  Score

  10^/10

  formbookbi05discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2