Extracted

• • Target

    Payment Confirmation.exe

  • Size

    1.0MB

  • MD5

    fe3ce5836f8a207acd4cbf7026fbedd5

  • SHA1

    52ee4991ce2013736d8264756a4499d0af9758e0

  • SHA256

    b7c14a475a2ba29399c424d9dfc6198d534713945e434a021fcf9c6c34e3826b

  • SHA512

    93a7457ee484c3509672075ecb5eb7b304f539c39ec28ac5832d99402a8b5700dfab7bf94f61021aa09d78298e57f46b974c1167b7c4379b5b3725445b445b91

  • SSDEEP

    24576:Ztb20pkaCqT5TBWgNQ7ajIVnb/hVgcTEZ6A:qVg5tQ7ajIBz65

  Score

  10^/10

  formbookge07discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2