Extracted

• • Target

    SALES ORDER875.exe

  • Size

    1.3MB

  • MD5

    6ac24df0d8b58005679910e42981dbe8

  • SHA1

    e421e5241a965e8714d3506dfb0aabc06ee52603

  • SHA256

    eb00047a6b0c3483760d36fc53b69398768f28532003f44d0b402052f65bbd24

  • SHA512

    6181b4ef3b6850c3fb60bfab6637e0fe80fd13fd14e2c56c8fd4cb25f633950d5c38262566ec3a77563a0aa17c4e5ffee78fe6962992175a5938a275c5488259

  • SSDEEP

    24576:MqDEvCTbMWu7rQYlBQcBiT6rprG8a8tqTr5mBln/sKG4K5nwqsPGAAJBl7:MTvC/MTQYxsWR7a8tqhmDn64K5sAV

  Score

  10^/10

  formbookge07discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2