Extracted

• • Target
    SHIPPING DOCUMENT.exe
  • Size 1.2MB
  • SHA256 fe52c98bfa1f03fa429f4044d5e5bfc3cfd4a571a0f6d37e955397cf583cace5
  • MD5 c1dec7a466845fe68e1c9deb52cf7ffa
  • SHA1 3a3e62a0d6955e9330188025b76e9f52a5c0a6d0
  • SHA512 8e22caefb96db5a3f73b37bbc886d2ea59fe240ec0279fc1f44bbf99c30ee9738d5d0da6e7b8b3df148733dd14bf4668d1e5ce5a8fcd2775123affadaba2737f
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Adds policy Run key to start application

    persistence

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2