Extracted

• • Target
    Remittance copy.exe
  • Size 1021KB
  • SHA256 e2ff7c5e749d36ebfcc2a9d5af487369e454ef301a859eb8fc11ebe15ea73e34
  • MD5 d9122108ec3cd7a570190d6add288526
  • SHA1 c3bb30592f68bb0071b72828ee1480ed673cbb85
  • SHA512 00a5ba7002c4231254ecc7a669b9e453430c3101937896a25cb4c341da123d1fd23b0e4b8094d003520a61b35ea9a92ffa30a4f898eb3457c2faf43a4dcf859f
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbookpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Adds policy Run key to start application

    persistence

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2