Extracted

• • Target

    ADOC WCMM-2401356 SLEEVE PACKING, ENERGIZER (RFQ.NO. PI-UT-2401253).exe

  • Size

    1.1MB

  • MD5

    3b40b771bf49996b4b35e06da9605fc5

  • SHA1

    97a482e2dd4f1f72455062d8676575692def61df

  • SHA256

    5e5e27104528c8102ae9df4a4b846144c898e2b742c7be1e425f2f741ed8d38c

  • SHA512

    91330f8418fad0355919bf4b64c8b4335d19e4a1948adb01b8824760c8f5c56be5cc533294a5d742c22992e44ec6fa4bbb2bea363e06b375d2ff464de592c839

  • SSDEEP

    24576:oAHnh+eWsN3skA4RV1Hom2KXMmHakAeddnj0bdae5:vh+ZkldoPK8YakAosv

  Score

  10^/10

  formbookg65sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2