Extracted

• • Target
    Company Inquiry.exe
  • Size 729KB
  • SHA256 e2ee2925682e188e41fcdf49f0274de4617fc3a9506ad31be7a9caeca6d21b38
  • MD5 56d8fb3908247ecd23aec0911b5a1f18
  • SHA1 7945e93f8d91479802ae223f66d11fe56728e690
  • SHA512 e2b99d160b5a79a3ba029ebf243f5914b72f2701f3ec955850dfe9af411456ad2754113df8d06fb91e668c57426971c1c663f74f4bb991c3c5cb9c07693080cc
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbookpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Adds policy Run key to start application

    persistence

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2