Extracted

• • Target
    Order.exe
  • Size 479KB
  • SHA256 a4f595a974ae8b5dc406b75aebfb8f6d44ac822b14c8ba0619f0416a55be3986
  • MD5 20cf4a0413b0c766eb6b026a6ea0d91d
  • SHA1 b1393fd12cbac6fd781f317e25832c56aa7cc825
  • SHA512 373b6ed082c1c947d3985abeedb3bc7116023384079a4ceff12448e758842d8881d4ddc61c3e40f4a78ff661c9ab7782488b9766fc86c6d14177150025538f86
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbookpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2