Extracted

• • Target
    PI PL.exe
  • Size 521KB
  • SHA256 b7a360cf2a3651e663b82407d8aa940f66b4c7f9569fc445771d8bc17f727bef
  • MD5 1ec11d708f6f0bd934fe242a9dd99426
  • SHA1 ed563089d8a220297d5d962780577c1adde655ff
  • SHA512 195dcd984cf51958b49cb24f47a33fdd575f10039804af24b9f182feb6d2b664cacdc211c12f3bf77c88f96b37f90f21f20238db4bde38801f6e687c5569322a
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2