Extracted

• • Target

    NewPurchaseOrder.exe

  • Size

    1.1MB

  • MD5

    fd81b225513545b27b6a852e7e5cc8f6

  • SHA1

    28868ac1e40f4c30cd7d67a283aa94a7c5b456ff

  • SHA256

    a6383c0e6d1660f45356eb6b6cfcb90d7558682c94994b7f23c02764a7d4fc08

  • SHA512

    1237b153bf6d76ddec52b7bbcdaadfafc9fe10127c5ec5dd7f00485fd5bf63d7adee8e1c86c2fc388cfa1547c29e040e704be381064f586a2383da6923450ac2

  • SSDEEP

    24576:vtb20pkaCqT5TBWgNQ7aLBF8famrZxNLj6A:sVg5tQ7aLBGPNvX5

  Score

  10^/10

  formbookge07discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2