Extracted

• • Target
    eDAwBRs0aYf2st9.exe
  • Size 439KB
  • SHA256 2351032596ba226e2ae00a4967cd8f85b158b5b2cfc1869d919bf5a2eea3c129
  • MD5 fcc5ff39318b32269efa3ba4814d694c
  • SHA1 64f34070c351b24370950cc92f0659f6ca0f9679
  • SHA512 2f7f017a29638c16467350e4bef04c521cb825bf442faa574aa928d1dc51847fd3aaa7bdf8d42c4f7796c952b655f0fecb1b6d669030c99fadfee6622cdbface
  • MD5 SHA1 SHA512

  Score

  10^/10

  ratspywaretrojanstealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2