Extracted

• • Target
    order SEC.exe
  • Size 303KB
  • SHA256 228e2e5ff30fec5cdde918f48e98664d9bf1f77f550666baa21208ca9b047af4
  • MD5 d0b89f322dfa77b6a13aabf7f7984f87
  • SHA1 81d40efb20f6dbfdb8e14a87c57d26b5dc9217d9
  • SHA512 ee98f698267f78abe777276a6853f17499098f9de546ee87ccd4eafd1bc361a0340625a0a9defb11380396297f5fb3200fba14822571618574e127403a88930e
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojanpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2