Extracted

• • Target
    ordine
  • Size 3.8MB
  • SHA256 d69b7f8a3a50e7357a74fb671743c58b8db46f3f5cc6b191ba636eb33a161672
  • MD5 39395b0b94607e228a77fbd84e92beb3
  • SHA1 b00e78d628b02e4c858436cbe361299d32e9152f
  • SHA512 f53be76e6cee246ee8e4917b44f54517afaa0971d34f2ad5df8ed0a52c9faca333dffddfd0804340dfcfd844bbc548c56e6c517b9bc7abdd08c392996c35038f
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Suspicious use of NtCreateProcessExOtherParentProcess

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2