Extracted

• • Target
    PO #78574764 June 4-2020.exe
  • Size 422KB
  • SHA256 2bd1995c8c2b3f35906807ce4697151cf801af339579cd7b86e467df6474dafa
  • MD5 130322a1fd284d7d585221381038c584
  • SHA1 620933b28bb9de45a0f72a415c0bfc85efcbb442
  • SHA512 3eaacdf8edd846d27059a04217540f561f8e592b537ce57412b45b67f797b7b25f8f76b7158ada512567a6f642911aa425475da656c29d7524d0995684d466d5
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Maps connected drives based on registry

    Disk information is often read in order to detect sandboxing environments.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2