Extracted

• • Target

    PROFOMA INVOICE#9868 SWIFT COPY.exe

  • Size

    1.1MB

  • MD5

    43d6c8c2775579ae01ff7b5f1f845842

  • SHA1

    71909d6547ff3809145adf04dd1d3464ec80af79

  • SHA256

    1d994104689ead3d369a62691a910888f7edfec8a8ad95926ed72fa41d8dff65

  • SHA512

    496d8a3ba215dde90af951594d7abbd5b3f9fa5cb1bfb001eefbd15547de0bdee7d0f59981483d8f85436dab4bde15a9371f195cdcbd640fd01f5642a7944f0b

  • SSDEEP

    24576:ffmMv6Ckr7Mny5QLAoHA6Sf9zF90vLvafQth:f3v+7/5QLAoHPSNF9qyi

  Score

  10^/10

  formbookge07discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2