Extracted

• • Target

    SWIFT COPY OF PAYMENT.exe

  • Size

    1.1MB

  • MD5

    38c2f255b1f39e51713619cdc3b47390

  • SHA1

    feb1e23f073d798afc6d1b10b9fa2c3a20acc845

  • SHA256

    340d10a718edfce802634ecd3582dc40069dc2a6a35ca420b4569338687c7d9b

  • SHA512

    4b2c346498727a725d8fca5c0a78ac7bbd5fe8bab2bb9df4933497e42229201bb76186bf15eef045b7e2a8901d6fa491b817c471db13380c624a773cc257fa83

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCl8JQXOlTZXdLd67iptk:7JZoQrbTFZY1iaCqQ6ZNB1w

  Score

  10^/10

  formbookjd21discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2