Extracted

• • Target
    p027639.exe
  • Size 478KB
  • SHA256 5c5f5e9cd06c7c7da03edfc2cd3dd6d45cfdcb5fe1b8e1fbb26fa63c264eb3b6
  • MD5 ac1b7bad52fe685636ade99c1c206f97
  • SHA1 fee1c98a1288d73f6c690b97a366bb1091837583
  • SHA512 e3e2ef0d658cd283e30bc062d50c033e0ddded711599ac26eadacf5d341b9825099f54fecbdfaa71d72968a9c6ce6ec6e67b7851b2b16ccac63bc8e60b3fbff7
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2