Extracted

• • Target

    PO-2021-FV6ppD.exe

  • Size

    1020KB

  • MD5

    b76684163bc9667e4907b4034a0763c1

  • SHA1

    4bda936ca3dee495b15aee5378a3dc87abd7cdef

  • SHA256

    957c5b5a6f0af47354f9ed2d09522fc671b8c0af06e3f3a5b6354e111b2c8129

  • SHA512

    10182cd2737aa6f7a1e8716659b89a96ee3bea78c0144cd19d491ac444639ddb13f6dc543ac7a5744b075cc3c02ffab4b0b088712c376fc3700c27aeedab435f

  • SSDEEP

    12288:dhm2ptsj6jRPLjRPqjBjjyjBjBjBjBjLj6Pf71xLtDaGgr2KbA16sCCwpTx9EEWm:oPHLtbx16Smx9Ey75

  Score

  10^/10

  formbookllcdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2