Extracted

• • Target

    OVERDUE INVOICE.exe

  • Size

    1.0MB

  • MD5

    6ed07d07cf776b88070683adbe3b6668

  • SHA1

    6cb4702a3d0eb3f9887b62838772f6f432451caa

  • SHA256

    97b4ba35c6feaccb928d2a4921d3f852ca36e70c851fc5edb7ae651efb2a1d61

  • SHA512

    27dd5bdf36658c359317812a0ba16ead05991eadf02067831d3278eafa61f197407f1d12bb149dd9c4605afbd8470918d8e53b5595e2e5fdeeaa4c538b5e4c1d

  • SSDEEP

    12288:rLkcoxg7v3qnC11ErwIhh0F4qwUgUny5QLJkbOe1vYUdm1JFXC6qzkdzCs3kcZaf:ffmMv6Ckr7Mny5QLaJvYDXpXCivzXm

  Score

  10^/10

  formbookge07discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2