Extracted

• • Target

    13012021.exe

  • Size

    1.0MB

  • MD5

    5a3dfc0ef78aab90422df535e97cbe9c

  • SHA1

    37a8d89122bd0555e3a83e4940ff1871892f55f6

  • SHA256

    ae73e8799690e6e7efe2222fe8a471af2c7f7f0f82dff259434626eac35a2721

  • SHA512

    63713d49cb4c3d1cadf05be96bfb6c1e9152b999a99ce9567c634d382e45885ade8acc0aaae3771a4396038337e1f31d2d3a50214bebc452e2e21f9010540c9e

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2