Extracted

• • Target
    Spare Parts Request MV Accord 8.13.20_pdf.exe
  • Size 750KB
  • SHA256 e99c6ae5a08e119d151f0c28b6b164d98ca6fd24d1d91b6f57bdf40f3d688c91
  • MD5 c1711ee7d080374845cecb35060eb0f8
  • SHA1 893df8e1438a37deb903484486579f86a43bfd9f
  • SHA512 d85059122768ce448a86415e6449c93640da77d6207efa58c634baa35d410fcc70432f2a0b5c9af624d13afdb511597a57970f6219ab1beb036f6718925115f8
  • MD5 SHA1 SHA512

  Score

  10^/10

  ratpersistencespywaretrojanstealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Adds policy Run key to start application

    persistence

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2