Extracted

• • Target
    nova proforma.exe
  • Size 861KB
  • SHA256 3fda3b75f031e3800ff8714a936af691dafd64ae8f08a2d5cc8df19363391c09
  • MD5 0fcd5af7970fef4816b6c79b4134873e
  • SHA1 e1321c0c7810f2b621483944a6ab09a0a8bdddf7
  • SHA512 904afd783cfccc589d84c732970d0d9ecce832368767d5c277280e017cb7b34476db1703d2a297afeb002c5967c90ad90e03a92731f80c5e1139bfb9d71266b5
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojanpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2