Extracted

• • Target

    Updated Price List.exe

  • Size

    587KB

  • MD5

    c6b38036b68ea21306e8814ab1b1b4d9

  • SHA1

    6b1ee982b77f2274ff6844f06706f13418dc6aa0

  • SHA256

    732336eccda1e0e01a9474a968eb6ac9725fec8e8e03ad950472df75ba470693

  • SHA512

    ffe83694f14e956fcd63e0f83845a1d631da501cfbf3552f0bc043d228b3fe59465a6c30bfd5c4bb98faaa89d00ecc4bf5881734a9d26d40759f7ce45eeee833

  • SSDEEP

    12288:b5WqpMT1dGUsVYQP3OT0UuA/4jj2m5tpyoBfVN07dq9ovF6sDYSuk7xLZXo:bw0c1dGUsVYQ6uO/mbhVKqqYVk7xdo

  Score

  10^/10

  formbookc89pdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2