Extracted

• • Target
    01986720202889_pdf.exe
  • Size 1.7MB
  • SHA256 72e42f1672249fbd4db20c17d5e29fba5838ef08cf0f6964d84ffc434ea46f27
  • MD5 0cf7425537bc937147f3e4bb528c0c4d
  • SHA1 2c57146f7279944ef474beaf700efc36a438cbe8
  • SHA512 1cffc1cb1752d04a9422b723141373b804b3012b6e1c54b49ab6e25ad5b11cebfe522a11c86e44e27af97b21b96c1fc766c99f68b4afdef75fef4d82b38995c7
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojanpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2