Extracted

• • Target

    Payment Copy.exe

  • Size

    1.1MB

  • MD5

    9cff570bbd99193ba8618ba6c5491a13

  • SHA1

    3848185fe5c08b05b27fbfa65cfadbf3096e908d

  • SHA256

    ede8ae39d91066365f959fc9c98f0b47add88604ce95829a9618a15274faef3f

  • SHA512

    191376aa71d6119d270a13692e8eadd06a492bc6777313fcc7bc27ebdc3244e902703bd8b206c3bfddf353131e1c2c9b7014e346649d1eb691d426d13764b34b

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaC+BJ8a3qVH/by3Q4w0jgo:7JZoQrbTFZY1iaC+wakmnw0X

  Score

  10^/10

  formbookc89pdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2