Extracted

• • Target
    5d18154aa0c1b10a47a67caed485e555ed98d535f718388e7ffcb1df40429899
  • Size 758KB
  • SHA256 5d18154aa0c1b10a47a67caed485e555ed98d535f718388e7ffcb1df40429899
  • MD5 2185a9b1d21b3e257a05de6b8bf79e28
  • SHA1 b327147c1ec52c893128efa0bb03db429db62404
  • SHA512 6f1622b1e931cab233f47537466974bf2b393637e001dd4ff9fc737eadf56eef4182ee0adf00b400166f6e391e25e9b52df2715b636e588ed584e6eae9d5295c
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojanpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Uses the VBS compiler for execution

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2