Extracted

• • Target
    05- 06-20INQ.exe
  • Size 438KB
  • SHA256 ca1a1e6067f0780b53d1863908555e55ad98c42d8af34d00be76f656d2d9a2fe
  • MD5 06af0d3387af5599bbe5767eeb705e43
  • SHA1 0fac666613403f2662ef34ceedb0168d55e10be2
  • SHA512 33798c714ff8f0fc08691c1e0e6fa267a1ffafb705c5d7f40d183bb48aa3c4260a80381d34b48c9002c16928b6368cddcd561d591225d5b5603b94974f77b6bc
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookagilenetratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Obfuscated with Agile.Net obfuscator

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    agilenet

  • Suspicious use of SetThreadContext

  behavioral1behavioral2