Extracted

• • Target
    Shipping Documents.exe
  • Size 453KB
  • SHA256 f9fa0a06495f261c09ee9f5cd1f3e32ed8d05e6cc65ed223adb4bf6c02cc90dd
  • MD5 b8c2e992eae9d82c4a03159e41783015
  • SHA1 f9e3f3c058d627275d04059ad305221c38f1bcf9
  • SHA512 e4b3c487b2d3b08a765b95b1cb2fcbeab69075c9c5d768543ab26f4a114f1a210eda420e670ed85964321f0cc1925dedc2fdd9d6f730f21f363680faa473f82f
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbookpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2