Extracted

• • Target
    orderquantity0030502020.exe
  • Size 890KB
  • SHA256 f14d7b35ccb962517c7657f064f0259f4fef55c53c77bfebc8ee360f642b7842
  • MD5 45fee64a3a96f7832d7351ccbf990299
  • SHA1 3ca94b74cc14a506f385fa7b633883c3a79d1de8
  • SHA512 d8d5f23d34dc52bfa2af1acd1b2d8cd8f6445d93088de3818729087ad1e7e2dbe83f47eaee0f17b7cd17458e61a890e5312d0d92d457dd387af32686a5235ce4
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2