Extracted

• • Target
    Scan_Doc_11052020.exe
  • Size 424KB
  • SHA256 11bd0634bb7c4af4391c544efdf458686bc52b75ce6919469ad01e7bf11bdb1a
  • MD5 cd52258b721f167e1af247528009c305
  • SHA1 afa8af35629c35ce91c5c6065ce31cef69bbb0a0
  • SHA512 036a258b30e6b661fc5f2f21f3449188ee6f978f88013cd0b64a40ddb1365cdf2648fdfc97e596dbd401ddc5a4ab156c753d2dda568742df1243db6f746247ca
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Maps connected drives based on registry

    Disk information is often read in order to detect sandboxing environments.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2