Extracted

• • Target

    Purchase order.exe

  • Size

    1.1MB

  • MD5

    5edb0f8e0ef6dd1e0d402f644c874e0f

  • SHA1

    46e50727606336dbe5257ba0c9e77006b7b710e0

  • SHA256

    5282b57b495bb6cca55225f7de91b203403b8ce35e41e62703e803f4aa134eb8

  • SHA512

    8129e3a284ed8514ed71367d03e8afd537d6636a78dce7995d2f48f32857a67a87dcdca102a45b33ab56e5e6486c45205d552b51b6907eda801def655288e6a8

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaC6WzN6M6ZdLNX50DEMhc:7JZoQrbTFZY1iaC6sb6TnAc

  Score

  10^/10

  formbookc24tdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2