Extracted

• • Target
    attached template.exe
  • Size 376KB
  • SHA256 792b531e6877d9cf92e64424e683f70666b07a4e8071e6988a1750b822bee1a7
  • MD5 f0ece0a664f09ed7aae92c2b051ee5b6
  • SHA1 6ba72ad4d50659482c5aad29af666ccd1a5eb9b6
  • SHA512 99c26be470576917b35fcd6212772681b255d41a3ccde8b9656f9f4e777a246a613d621325e0e2149ca9dbeae73162fa7c22b75d05ec69b9b8da0482cad224fa
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojanpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2