Extracted

• • Target
    Me.jpg.jpg.jpg.jpg.scr
  • Size 96KB
  • SHA256 6617979630def30c8a103baceedd1ddb972a53b984de91682aa93451faf833bb
  • MD5 c289ec525b815c400eb88beb1f459489
  • SHA1 ada3b9f684091350231c393962354c6c77c5695f
  • SHA512 73a3bf81a64c2cfea278bdaaab397f1cc823453f3b48af8a0eca4afa9052bcb32df7f50cb8e9f5f248fa9ad3feb8ed04ad8de0516d8d752d122a928d6c29866b
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbookpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2