Extracted

• • Target
    u17mv3Hf1BdS3fQ.exe
  • Size 532KB
  • SHA256 a733deff759ea8ed7bcb941789e3458cd51b4bb355b66c34a08e3c790ea5f688
  • MD5 536325ab0b94900bb0a4371b938a8b4a
  • SHA1 fe5297e35cf7a912432f88a10cc63ac7598363a0
  • SHA512 b191ff2a4c21e247567030d4e9589ce19b6e32c7aba53cd4a02aa73c8dddfb9dbe281211750975071b9de3c26bab714b97a91a19f3dfdce1812168ea91bfc014
  • MD5 SHA1 SHA512

  Score

  10^/10

  ratspywaretrojanstealerformbookpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Adds policy Run key to start application

    persistence

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2