Extracted

• • Target

    PO 5904318664.exe

  • Size

    1.1MB

  • MD5

    6f2d96ba0d4390c620690fc4178253fb

  • SHA1

    b0db06e17e4fd85b82aa6c36c2f924ae82a30e93

  • SHA256

    d7b29a7bc7f922835157f0baaa0b8ad4804f8929d8d0606c214eb82803cab1dd

  • SHA512

    17815d4aa738770b2b2c9ba838d99cd5056ad53e4045bd0091f4f3f3421bafb5a787e9ba062a04bef0a2f0c1408e7b44ad5e6fe353b1c1bcba51cec3767c61c1

  • SSDEEP

    24576:ffmMv6Ckr7Mny5QLnzObQ1VrfIikdtJ8w143hd:f3v+7/5QLnC8PriB8CU

  Score

  10^/10

  formbooke62sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2