Extracted

• • Target

    Payment receipt.exe

  • Size

    1.1MB

  • MD5

    e2e083fa9b190d0249845229f584a72d

  • SHA1

    2f554be4a28d9f21f3da126ef351fb3f3a3b35ed

  • SHA256

    5775d4b06096a813ae445ace79308cd93882ea2e303362ecd53297ba8c4a38c4

  • SHA512

    70371955a794665389d1fe4f294f3aa72cafdf01e306c63664dd1fb957cb7b38bee1231abd1de1a12736ae229581eee7a050485423f84454be607c3ad4b5a875

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCBJd43eZY/F8wFgOxottM:7JZoQrbTFZY1iaCBLZ2TFgEo7M

  Score

  10^/10

  formbookc24tdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2