Extracted

• • Target
    WQA101320.exe
  • Size 681KB
  • SHA256 f2cb02b3c504a4db0b43f79aef0d63398d9b984ee84d07acd690a448b63b5636
  • MD5 a609603dc74362957d4824690179f0ce
  • SHA1 985f4e022084ed7e8aa3437eba0553caf0e8cfa2
  • SHA512 575b426ad05402ac2d7ec4c294de3038bb16ad3f2e26e2c10a43156ef74132ac6c2be5432a5f2288acfe0fd6f1ece05e5cc29a817b88f12def98ddfecc54b8c6
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2