Extracted

• • Target

    PAYMENT CONFIRMATION.exe

  • Size

    1.0MB

  • MD5

    8fdc4e20705ad4f83474fd664ba6b627

  • SHA1

    29452d7daa56ceecf38fefb434ac78fadf494b3b

  • SHA256

    9b250f96c8e383893d2c2f0ae940312d86e6aec8d0e27aadd9087dce67d17c46

  • SHA512

    5aa6885ee2d16167ad65f5dabf45f78078f97f33aefcc2a9fe89eed6fd68b38eab07d8ac493c89f173f794c8e9aaf4edb09111c36f15a67244389bd752c70881

  • SSDEEP

    12288:Ytb20Qc3lT7af41ePBRYuQLKpqeUhbTv5OFgNuPPpHSgad7ouhgE/f4SeKq6o6A:Ytb20pkaCqT5TBWgNQ7axoCA5N6o6A

  Score

  10^/10

  formbookge07discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2