Extracted

• • Target

    PaymentUSD10655.69-Kassim.exe

  • Size

    703KB

  • MD5

    10a6749f5d629dd8a724bbab9e4ca18d

  • SHA1

    51f9876f7f414adc7069569c1f034b96e32a1694

  • SHA256

    a66fd780dafe112e8ee95dd63b7d6138fea1e5273b961b2774e3be95a677990d

  • SHA512

    c5646e67585c20dda9f09d8deafa5c0dc7100e055df8e13ba2b2f81ac63b1eb8b8f751bd7630b5c7057953e915831d4dfc69b4b2f6e0e9ea0e6da9a34022e715

  • SSDEEP

    12288:QvRrXQ9TZweIjcQ2nK7QjBj+ljRc6f/itos8NDiTThb+izH4cAXsq4nXZs78xLyf:qwIjdqJ+ljRdfKtos84TT1Pdq4nXZsBu

  Score

  10^/10

  formbookmd49discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2