Extracted

• • Target

    z61SwiftCopyOfPayment.exe

  • Size

    1.1MB

  • MD5

    f2ef24cf0f51c2f7b5f612243dcac938

  • SHA1

    abc30508a040bb72079c289a922e6364ebf62c90

  • SHA256

    d102c80796109d88222970309735b0dced68e86ea9b641e0ee11ad2706a3db1c

  • SHA512

    5f5fffa434ff8832694f1422fbc8469f36c4e61252705ba5c723301a2d32c0714f3c4e0ffca6dc2b21ab75728f6efe9b5e531e216627fa9bdc70816f3de93f83

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCbApJSHxzkx2eHC:7JZoQrbTFZY1iaCGIadi

  Score

  10^/10

  formbookjd21discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2