Extracted

• • Target

    Invoice No.24DF-55553 [EFL].exe

  • Size

    1.1MB

  • MD5

    8caad42143f533bde62f170aa19e30c9

  • SHA1

    79ba95ce19503756f834c4af477a81723ccedf4a

  • SHA256

    bafacac035e304436d77c218e213c0e6a96414e634abca26f5b2c5dd1c401da3

  • SHA512

    fd08d305fa07ddb7f0ef051d10c4c64e6d82692e1a7a3e7239ddf604f2769991d940e7964eacbb8546ecc849a80a7c5df54ae317a6d438361e138ac7c87073db

  • SSDEEP

    24576:NfmMv6Ckr7Mny5QNJBaeOUpnbyM41MdVzwk:N3v+7/5QNJWsGtMb

  Score

  10^/10

  formbooke62sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2