Extracted

• • Target

    PO_410814647.exe

  • Size

    1.3MB

  • MD5

    30b87c4aec78f7a3e73e5aa189536825

  • SHA1

    6303a0d45df830f29f201965a2927c636bd2469f

  • SHA256

    75a9948f63204ab951dbd23559bf5c796dd51c3b0fae019f3c97ec0f1d6b6bca

  • SHA512

    752e557a65e452acf5f01cc88bf9af18f1806954efa95e406e04c88f385f6551c9896e247d1359d4b08cc0fe6f95c5308f0f57ad4a64bd36c4597655ae57468b

  • SSDEEP

    24576:b5EmXFtKaL4/oFe5T9yyXYfP1ijXdaPjV/uEI4ogd2v:bPVt/LZeJbInQRaPR2Edr

  Score

  10^/10

  formbookge07discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2