Extracted

• • Target

    N5teSBoBlVySUoq.exe

  • Size

    501KB

  • MD5

    6c914ab41b3b8fcd47d2b52458aa98ac

  • SHA1

    dc01e0c3bca0facd2f4838ac42b94ff0c3c88bd1

  • SHA256

    2d8474bdd8b6122aa79a3b86f729f9aa4f83a2ccf6a51ab510d753b47fc01189

  • SHA512

    44cb0d199025cbf4bc6b6fedca53bc6aed9f676c436ded8a88eefef12a846d3ed8fb612bc9713cea6a7bd2d07fac88a009e1c659379cec43aa571fa69d800984

  Score

  10^/10

  ratevasiontrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Checks whether UAC is enabled

    evasiontrojan

  • Suspicious use of SetThreadContext

  behavioral1behavioral2