Extracted

• • Target
    TT COPY.exe
  • Size 223KB
  • SHA256 c69e54b704c7d7e94faa9c3ea2519eef344e1099aa99271833bc56cae00ab8af
  • MD5 ec06ed8fd6d87ddced8d52bb6cfab723
  • SHA1 e238681eb57c4a5b51d6a378f4a8038cb1cb7594
  • SHA512 2dfff09fc10e06555ed92f440978c1c471111dbe86d4924850fc1a7d0eb07211d99839c22286b2d049e2717dcf592f30b376a48c28a8c3230a2e8158e6261dd4
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2