Extracted

• • Target
    PO202016.bat
  • Size 687KB
  • SHA256 e69790e910b1817bcfb714f20fda02b6e024babd3dfcea8fa982192928a5df93
  • MD5 97a6c2b963eccaa7e510b26ddf725241
  • SHA1 b9aa8ed38cebe843367103b4fa9d3b7da5396fb0
  • SHA512 4d32793d4a9a15d7c6d1a6cd87a4a134cbfdaf3ffcad19089f90efae2efc31e31293f84dab82eeba096a1fa42a4575a91345e03af4b7fdd6e2e6b56ff4f034a4
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Maps connected drives based on registry

    Disk information is often read in order to detect sandboxing environments.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2