Extracted

• • Target
    bank copy.exe
  • Size 322KB
  • SHA256 b9cd83c667b694ec10f884183b138beeb0f986a7d3c50af463535852f2fa0663
  • MD5 4911c564fb9093adbd7b5a724a66c10e
  • SHA1 4defd3320fc96ac6f77f4536a808048acb66cbc2
  • SHA512 94f49c1724b52009ae6aec8382f95e095c9207bbde464ad1a93e97210a615c35cd13710dbbbeae850ecaba567c46e99a3d4b6a204edd6db19d0f531c2de4eb7f
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratrezer0spywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • rezer0

    Detects ReZer0, a packer with multiple versions used in various campaigns.

    rezer0

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2