Extracted

• • Target
    Zargbqzk.exe
  • Size 736KB
  • SHA256 db351de507bfb075469e69ffe4859653ca3b3d0729c0236a5d3f8fd935e01cde
  • MD5 1147b7f65316255a2c423847ebfc5178
  • SHA1 2646f10d8a57dd66783a3dfb760c90fd0a1e39f9
  • SHA512 014cd70d9ab289dd99de5cf1d58a14188ddd8050dca70e185b20154f3b0dfc7a69b7b108fd8e416dcf7d425094cd3757e22b9021db0c21341e88c7890183e32e
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2