Extracted

• • Target
    nass.exe
  • Size 878KB
  • SHA256 addd4ba4b4aa754501d638cbbf3c78bec538ca15a72acb5eadc7babfaecfa350
  • MD5 03cb3f8cfde5e3396914445acf58c1f1
  • SHA1 197cea5b1542051241569f47797f3f6b751c54c1
  • SHA512 950ba5b06cfbd6b557cb014faf5a3afee9ef45efb2fff4e145fb90ddeeb28fa609edd67adca069f39a45026d34baa49a54277ae2896c51a043fa7f90dbea4121
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2