Extracted

• • Target

    Invoice -BF.exe

  • Size

    1.1MB

  • MD5

    a574d8e90f0174f5fe30edb676b9f106

  • SHA1

    e5a008bf01cf36c343fc9d90fc8d728524e33fe5

  • SHA256

    d2c3ec17a82adc64cbf865b806ea8df48efcee31a55e5ee6e61de3dccbbcf6bf

  • SHA512

    04653911205ec9f3c093ac6640cfcd42ef9cd45924c6536d7bf721db672d4459a24c79bfb9771165d2a80cbcf613ca3fd7e481360a0c3498d8c2b33b711ce532

  • SSDEEP

    24576:0tb20pkaCqT5TBWgNQ7ap4hb3i8jR16n6A:dVg5tQ7apijs5

  Score

  10^/10

  formbookcl21discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2