Extracted

• • Target
    80e034f9519c0b327c5d55c5ba34511e.exe
  • Size 1.6MB
  • SHA256 f91b7471cdeb5b3ff9ac0fbbef508f16a405631a3d3ec8014d0ad87d5e6fbcd5
  • MD5 80e034f9519c0b327c5d55c5ba34511e
  • SHA1 7901095067aab8e0c400f34343ddf52371671a9a
  • SHA512 9156ce853af264615d5613542a99252cb7fdbabcc8463bffaf0aa06a2274669a02e245220805e95db577b65e24dfb2382db165a6eaf74b51a2018d8c86fd62ad
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojanpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2