Extracted

• • Target
    TRS0000001062020_pdf.exe
  • Size 350KB
  • SHA256 590fde182a154cd89b15d88546d60351b9fecb51e04fbbf4affd8d49a618bd23
  • MD5 e59f75085d892b91e0400b1d80967cc5
  • SHA1 b802bc66d1b347892feb99eb376dc2bc960229ef
  • SHA512 61c27168dfe74ba8133713df4df767bbd16551541f554200cf49c442acdc2284eaec45b9e18e8c93303b1babeef6e5f942c9839c4d13aeaa9124793a24c910d8
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojanpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Adds policy Run key to start application

    persistence

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2