Extracted

• • Target
    Scanned032221.exe
  • Size 652KB
  • SHA256 17dba25e41a7c193a9abafca9194574ff970d56c1defec9a1d4fed04590d9ec4
  • MD5 c6ae31762a9bcf512da3595912d0fd2e
  • SHA1 f2537f67b4f78ff384c76e7fc7f6762af2b6864b
  • SHA512 aef8f2677bf777a8fba5c34fc8fb4a7ca7bbbe9a1bb79897f4286d164fecd16fe76bfb5aff3a356c114dfc0c19996535308229096a822c93351c39917856e0d2
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookmodiloaderpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • ModiLoader, DBatLoader

    ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    trojanmodiloader

  • Formbook Payload

    rat

  • Adds policy Run key to start application

    persistence

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2