Extracted

• • Target

    Payment swify copy.exe

  • Size

    683KB

  • MD5

    6321255a413b5aaaf750317b0cc911f1

  • SHA1

    7a02f0345d494a686a9b1c02cfbdc277af3add3a

  • SHA256

    cf18af34e360f0f773f774ce7231f28f6b471fa1b1739e91df0d4cfb943774e5

  • SHA512

    0e625dbcc154d3b7c487fbc2021265761e19a7a8a87504c570579c1331d550e4384b4b482d9b51e5b8f1e95a85abae64a21b1276f1de169423a17a19b93b7133

  • SSDEEP

    12288:f2Z00lxDGuP5bc/puml1cIZulFZ4NVPad3AbTWFZnmEpCQxh4vi:u5agecIZuheVPakTW7pZxei

  Score

  10^/10

  formbookmd49discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2