Extracted

• • Target

    PURCHASEORDER085.exe

  • Size

    1.1MB

  • MD5

    a9f1ed7bb8e8ce70f8598689ee961ff0

  • SHA1

    904ff7477dc325b9344b3d3146462fc198d015f2

  • SHA256

    7536fe232219ea4914869d8fa0342284615bd434eaa028239deb355b16067e69

  • SHA512

    5eaecd64d6a3b11a397fabaee6d6bd728f6db9962f0746f32f79211a7be662efb1c1750e82b6124cc25614c408067b51c27a46cda9b617631d2f09354c6e4596

  • SSDEEP

    24576:ffmMv6Ckr7Mny5QLaX/c6dJYkcRpiBaLfQnRUNwq:f3v+7/5QLaXE6dmZDmS

  Score

  10^/10

  formbookge07discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2