Extracted

• • Target

    PO 211210-02B.exe

  • Size

    1.0MB

  • MD5

    4064e9b07c90788942f5d4ca84fe93dd

  • SHA1

    9e7b93ea418d60a11d191a9d0a368d2880c2abb0

  • SHA256

    98318bf03a710984e1eaa61e8fe1ceb1f78cefb0de3ee8168dff8e4b144d6b42

  • SHA512

    067eb0ffeff7d61c3bf5b1cb8f28df9432f564d055b4a730573b37ce51aaaff9766b00aec072e3177b730ff3a4dbe635b1964fbb0667c713ec5a0e6c88a65f8e

  • SSDEEP

    24576:qlEGxQTnyni55j63p5zpKeZJ6wprm0W7nNM5VtcYTPy0AiQmywV7Nt+bSp/l:qpxayniu3/tKeZZpr/W7wBTPHRQBYBtX

  Score

  10^/10

  formbookkz21discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2