Extracted

• • Target

    1024 Order.exe

  • Size

    1.1MB

  • MD5

    2c91449d105252bdb8685eaf82baf717

  • SHA1

    d34be35207e27e768189b967dff5c138b5348f74

  • SHA256

    5a0f5258d3f90db784b6d43565d0fd74579b162c683b72d41cc070bd8a7b1e41

  • SHA512

    b4f072f42aa868d5278c5891bf9786918a8c30e46575e3ed0c8ffe18e1bfe6b7d9b7fd2624756a0f479f2e76403dc273dc7397773aefc9d2c604bee6ced7456e

  • SSDEEP

    12288:rLkcoxg7v3qnC11ErwIhh0F4qwUgUny5QLo2ylUyMtAiu5jdOXu/jX0bhLbSSY:ffmMv6Ckr7Mny5QLw2tAZxKhtY

  Score

  10^/10

  formbookc24tdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2