Extracted

• • Target

    PURCHASEORDER_xl.exe

  • Size

    1.3MB

  • MD5

    dc43665b900f0f30bee8aca7505a4c08

  • SHA1

    3e45224d1f0e65c09f741a83591633011b3c0ee0

  • SHA256

    a6f25510b6ad94bc18be6ea38eca643236fc194050516df66cafc93859079f63

  • SHA512

    76045c4d51dfe7d8755eec14e96dbabf97575e4bcff57747b82abb9a740662c1bfb35a59a96a9e55483d89c61f537c6590b6f23c03de5ff162812ff8a6e19115

  • SSDEEP

    24576:cqDEvCTbMWu7rQYlBQcBiT6rprG8awE4lEyDH3gVyeqaGXtVVo:cTvC/MTQYxsWR7awoyDH3gselGXt/

  Score

  10^/10

  formbookge07discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2