Extracted

• • Target

    Confirm Proforma Invoice.bin

  • Size

    439KB

  • MD5

    c8c984aa8535536070c90dda6d6a46a8

  • SHA1

    431ed99f88f68b9933fbf8b642c44150565852b8

  • SHA256

    a344590804a69e6f50c2386206d5d050db788fcd42716d1c14f77ba501e63d4e

  • SHA512

    14d10fab4f19796e53e2075bc9b27df8f217af28d97ea250f2ae5f83421bb568bd3a58888e89ad036a4b5a4a2d3d388ffbd4f914c6f9c28e7c165f487a47c5c9

  • SSDEEP

    12288:OCv2zv1grDRQiSSJWP7BCBkNAUqIwrk6WjL2iN:OV212BCmNAUarqn1

  Score

  10^/10

  formbookrwodiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2