Extracted

• • Target

    P.O.exe

  • Size

    556KB

  • MD5

    283809f80d5c24b3eb3e917a5b3c4c53

  • SHA1

    1da1a8aec833aaa560e50170407f4d371b9cbca9

  • SHA256

    31a702cd5ff00baefbeb5f301ca3015587a099b0046939cc3d1e8cd553eb3147

  • SHA512

    792a0adcaefdb0e5bec5e820f1070bbd5235f1407638dc8365f56592a5947fd1c38d74ddd2d6fe29dab9e1d171ccee26638b10e4157e01304da228da7a162e2b

  • SSDEEP

    12288:QgUSUpCEg1GSbvTOfkeepuEAewOlCXwxYsGpSuMDKaqfr2:Q+Q7g117O8FwEAeFlf8haN

  Score

  10^/10

  formbookc24tdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2