Extracted

• • Target

    HNGC 04 ORDER DOCKET & BLUEPRINT.exe

  • Size

    1010KB

  • MD5

    7da2caa62ac9ebc22d4c4652c1c64a40

  • SHA1

    b872068a8c0836088f4b480b547cd3976f2e2ff6

  • SHA256

    ce52755476e6ccbe1ac1c8d850eacdc8d3ce3ccfc71e932df8709c4abe1f8899

  • SHA512

    bd1f94dd259771a5df2b076e64f975f661b2c6ef4c148bfb8900750cbf1e4abb5ac083da80f88714a24cb9436b240d07c227ce11051c00e7904a6c342545e9cd

  • SSDEEP

    24576:Ok5akazqoRlErfFVqNoRRRRRjXtAmA0ZSE:Ok5aka5ShVqNoRRRRRjdAmA0

  Score

  10^/10

  formbookr4eidiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2