Extracted

• • Target
    01308.exe
  • Size 474KB
  • SHA256 d5231355835fc25fb6f9923639331084ff0ae602929793c263e01eda38d2fa1b
  • MD5 25a53b5fdbe19e341d674b816175d4c9
  • SHA1 94d9ad37e73e089eaa967ab433351992a3aee500
  • SHA512 baf0f1b5e7454e99485be3a16dd5d19cdde08f71bebf596f854cb0c1a89d640de23caa777cae96bba22ededc587dae9814794f6fc4b0ce8ff9f921d67aaaf59c
  • MD5 SHA1 SHA512

  Score

  10^/10

  agilenetrattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Obfuscated with Agile.Net obfuscator

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    agilenet

  • Suspicious use of SetThreadContext

  behavioral1behavioral2