Extracted

• • Target

    SecuriteInfo.com.Trojan.PackedNET.509.28611.29307

  • Size

    1.2MB

  • MD5

    23a53bec3e0bf43ec47af722a6aac7cb

  • SHA1

    fca6e1d1690dea3911407662d8979c7cf037d754

  • SHA256

    16160e8686be9eefc11ffc8eafdabfbcda53784d95d1b747717cbb90acaa04d4

  • SHA512

    b21fdb1c78ddab75df07fb2bbc84f4d3c2061178e6370bcef6744019e1ea5c46152ce7aeb0cfa152ea8c730e53cdca23e27d97fd5e1fdad89c24483f68bcebf1

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2