Extracted

• • Target

    Way-bill doc. 00095760037503375000.exe

  • Size

    993KB

  • MD5

    28065df84df23230d9eabcd0a299fd62

  • SHA1

    1a11b46fe50ca9509328914932f7c8f2fa58a387

  • SHA256

    76ad60aecfad584010ccd54bceb275369376d7587ac24c2cc41fd63c20220a36

  • SHA512

    c77166a3559a8638e322f1ba2192cb05b8cdf05ff689c728b556a984b47e53607caea3fec925bdeb428ee49bf9ae5cb4892cc68b52868029602f0206c3fecfe2

  • SSDEEP

    12288:8q4FEF1rCGWQz4TboG9f9Oz144qkUEMiUmrf+NGiuNOMRfUpKXq6ZRvu9xojfOd2:J1dkTbooa1FqkUEAJYoMfXq6fwk+E

  Score

  10^/10

  formbookcrdidiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2