Extracted

• • Target
    New Purchase Order 501,689$.exe
  • Size 776KB
  • SHA256 27c9bdfa6cc8c9343b507ee1df148482028afcabda152e356feabd28ecd67eb5
  • MD5 7eb4a098afeb697225602abfb7d9271b
  • SHA1 857ee7a930c58ef351cc24178583936aae8f6c50
  • SHA512 b0a044f8e7ecd67bfd96fa3b9245a6c3eea54d65025b620f86556be94a4213ee3016bb8d094f36e5de6b57f4f3ca464f108f45a1477c9e424afeec48d168354e
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2