Extracted

• • Target
    New Purchase Order 501,689$.exe
  • Size 568KB
  • SHA256 31a90420f266f02ae50a6a3603ea81461fa26baae094e00448aadc569c8f7dad
  • MD5 a66f75234f80a55723ca776c3f5c2445
  • SHA1 b72063c370f04655f49100b9ceb7fc2030dbc4d0
  • SHA512 5f2166a9926693549e894dfb4a1326d2ee1d4c08b15bb3d0b73f05fbe0307a1b07b9f8d628e6e9a71b5c20ff7e409426aea5e68ca9f58ec080b5878c1d292118
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2