Extracted

• • Target

    Payment Clarification 009475.exe

  • Size

    679KB

  • MD5

    335679582645aabe658a6aef4067caa0

  • SHA1

    45378dff6bd5c9f80e5ed309baec90c001f22052

  • SHA256

    d24759c2da85654f95e71923c3b6a4ed23aee296e4fd70f436ee3bfa190647c4

  • SHA512

    b96903b9f70c89f38dc25d85e5b7e0f03e49b8ff7cc746c9b6f1f79044269f222a704ebac9d5b03b64038ce23931acfa103f3322c98ac82e1a645a9987c59c60

  • SSDEEP

    12288:eYeEePswecl9dS0D+izGP+PM/bqR05NGAQ+56SZvgKiCxpspb91qSZl:xweQT6iqYwGr+5LvOhtZ

  Score

  10^/10

  formbooki62sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2