Extracted

• • Target

    DRAWING SINCOAUTOMATION 6994745PURCHASE ORDER SINCOAUTOMATION PO 322357781 Ref 6421SINCOAUTOMATION4533DWG.exe

  • Size

    1.1MB

  • MD5

    4863ac582a190c191b7ac02e0e463ac3

  • SHA1

    686cf063bdd59d93a8b0890e73f324df68ae6139

  • SHA256

    92ea4b0cf6fcc26690114a899d13c975134d5e21b33d2cb6087ef8c336826f19

  • SHA512

    1a0b10a9b973b744180a4e849cfe5b05068ff4fa9417eb3313817cc63527706df33d4362accb598249dc5c05cbfe6217143f82d8bdaa708531a4e8fea19ec6fb

  • SSDEEP

    24576:oAHnh+eWsN3skA4RV1Hom2KXMmHapQYCg7myTaDZP5:vh+ZkldoPK8YapQ9ELA

  Score

  10^/10

  formbookot96discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2