Extracted

• • Target

    Euro40000order.exe

  • Size

    750KB

  • MD5

    43d33d32b8a2dfcd192f568f297c7d07

  • SHA1

    989d2ec220dfe0c39dfc97f824c6916c7214f380

  • SHA256

    886bbd99a81dac59ab10515a0595fc8c32753c1fe929c4558157b17085ed5b58

  • SHA512

    4eeb5f84ffc3223bb73334e10449c31f6229eee8a823346d11e4c59cc324d237ea0e483e1c04d0c7fcba0e4a13138e6802ce50aaf786b5296c0e657e1a13c22c

  • SSDEEP

    6144:6u7EzoMvj6R3GPPd2fj0NXMvKTgy1PI8dPPYwztLdW+9yp1zqv5mZzhw181LfCS0:6uIbMedQ2JG6Ywzq9OeMP23G

  Score

  10^/10

  formbookm52discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2