Extracted

• • Target
    Revise PI.exe
  • Size 592KB
  • SHA256 fed568f2ea01aab915cf34cbae9762d0b6002ae51679980975b9d25f55ae9514
  • MD5 d9a8652020e9dd372b1631fd8ffa5471
  • SHA1 9b771e55a6b8f71d951d2657a68a9a67d632ff96
  • SHA512 fb6f33f4ef23fc01af2509183810720dd7483ff55ef64eebda2613910be7207c68349eac2bb4a8b9cb664d04a44134aad32149d51c9332fcb7cf209348d3c8bb
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2