Extracted

• • Target
    XwFxBxg9AbaxStq.exe
  • Size 559KB
  • SHA256 fa2fea7b2c7e6d02c40890b178133c0c21e6e1182c170c09de4550e85c98e67f
  • MD5 a61336afd70ff660a61155dd9bb24c9d
  • SHA1 e9bae2e310b6e122354983b8e75dba91ff03c753
  • SHA512 1b8be734a3b98b1df8dc1ec217e538b306def4baae11684793d09ee7ed963020c524b30b9b78f919b536265e2063da1734e32e1a336d428ff30ca0a5098dc3c1
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbookpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2