Extracted

• • Target

    Payment update.bin

  • Size

    741KB

  • MD5

    bf34896fa20667412fdfc4f2da5b2b2d

  • SHA1

    7af4a5bbb6e45110543cff78a221075cea4de721

  • SHA256

    5810c640bb4219ca39bc8a0c8b50f8447e5e47784e75dfdacdce65d5d2c31e47

  • SHA512

    adb61d4380e54e03d3aa80ec099fb4a5ba7e78e0246adf1e548f83e8e7adff03067508b637798c8d076960059444adbc981f02ae2ec6e47838be43f83e4c028e

  • SSDEEP

    12288:mz2WFHmst7SPQnpAVH2rXOqoZ/wNQm0G+oB7hXC/2aEMnJWYTl:glHT7SPQuFT/80GVBlX/MnJWYT

  Score

  10^/10

  formbookbmmodiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2