Extracted

• • Target
    8903-Dco2.exe
  • Size 557KB
  • SHA256 ec8d87e7db1c4f69358cdd9de92c9f8d4077dc7b61b4ccb834bf2fe129279289
  • MD5 dc81e74a59940379870c59aff72f1540
  • SHA1 6ec5f57a41bff9255e62822f720c089cb372f422
  • SHA512 cfc6179a2c4278c56e371b02e23707a9ff585ebbc991fc427ba6179fb78371d706844e61d4b7328483b3a2ca47215d032efb3cc3962ad2643adda173c9b14180
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2