Extracted

• • Target

    SHIPPINGDOCINVOICENO.HCAB2324.exe

  • Size

    1.0MB

  • MD5

    d1c637d049eb33c643b42d3b2c31c95f

  • SHA1

    ffb84ed4e639b6654af0b0aeb9b488b6d7d6d83e

  • SHA256

    534e660f9cdcc1e76d0674657dd6b09cc2f5856e34f71369e06ccb2d58120fec

  • SHA512

    cf85b73c20e84a5d02a3ea6ac098413d500f8cd1d231a9ce91bf79507d9a615f59dc0a2aa7e40e0e2e6af7c489e07ecb96c39d88c27d5dfbea1e786d28a3f9c2

  • SSDEEP

    24576:ffmMv6Ckr7Mny5QLQm4lWq4F33OpK4Zmu:f3v+7/5QLQpWd3YK4z

  Score

  10^/10

  formbookge07discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2