Extracted

• • Target

    New Order #60-958400861900.exe

  • Size

    1.0MB

  • MD5

    1f722c0fe2a947b86676925fe00d40bf

  • SHA1

    1b21430ab7ac416ffe9cc6a1d78c60e4b35d45a2

  • SHA256

    b16f599225a875a9f8dd55e32467522916d48337bfa30939d4e48ee50cf96a88

  • SHA512

    96c2dd52635e21cb56adecb411406f0f780f9b465937f2b28423f2019aec50774f1ade7ece8aa51d93c0a535f85243e81a2e737c367745d0dc171a85bdfde3ca

  • SSDEEP

    24576:5RmJkcoQricOIQxiZY1iaXcm8BxbLrryLGmiV01I+S8Qy:WJZoQrbTFZY1iaXT8BxbLvy0V01IG

  Score

  10^/10

  formbooke62sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2