Extracted

• • Target

    Purchase order4756485.exe

  • Size

    998KB

  • MD5

    524421853f704a1290bbf12d849c47f2

  • SHA1

    4f704d094fcabfaa9f4a73fbbfc9651bdd73406a

  • SHA256

    876955f77a0817e4de8c1d5fddfc98d8fea616499f91757fb3ab7f2a6fdd1577

  • SHA512

    5d41c258f21a61c6a8505546281018a294b98b34444963a0b05a375c99d92fa796599a4634dc28ebbdfff8248f170253c64d14226a04c1560d56b7c85b2d5eb1

  • SSDEEP

    12288:XHAsJsJbuA1Rzdnuc9DjwjFDDKaog1h1PU+bthEJ2/FmD4EwCYyz5IDAjH:RaFuA1fucaBDK3a1PU+BcUg4zAjH

  Score

  10^/10

  formbookcrdidiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2