Extracted

• • Target
    12-4.exe
  • Size 1.4MB
  • SHA256 37cfb7fb31732401d50f7f17c28fbea5997ef4a7236ce89f37dc57675a76b23f
  • MD5 86e9f171ca095286ac610deaf54c7667
  • SHA1 ea152559408d3ce06448b654fd9e79b843ad6975
  • SHA512 7c1e51c851e03cd06ebe619b908e3eb133cc291d843909154067019b32ca9919a8323327d8f6527aa36be68630f3ed15dc5c1afa3b4c73157750916abe5f79f2
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookmodiloaderpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader

  • Formbook Payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2