Extracted

• • Target
    PO_5892 JANGUANG.exe
  • Size 299KB
  • SHA256 8058effea9cbffe67d3cc69221eda22862586eecdb7c9409b4f9fd6eab6ea04f
  • MD5 a040984ea1fdeb9fdd5ee61642ead4cd
  • SHA1 a26f6303db3e0ed321cd79ca9c862dcdfc2bf4b1
  • SHA512 5021c8411d63d1e3f99945ecbc08a9352a5c611e7a0bc019bce7b5c138f77bec6eb3d7e793188da0369e1741b04b1b49366dbe75d58b840217fbfcdab4725f81
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2