Extracted

• • Target
    PO.exe
  • Size 222KB
  • SHA256 ce27bdaa30fc5a712b41888b529f52c87f90b9d196b975d47ec9b5236b48cebc
  • MD5 ba83b33d39ca6c3bf1f311d1b6a38d1a
  • SHA1 ce0bcbb882b1a2105138b9955c1d892e4c6f0947
  • SHA512 e251a936be79eed23d04874324be745090919af5ab7ee95310c06d8877f943fadc9752c38db70a5f0e7d3799e4f89f471233c96d18b92c12dab9bf78f59d2b13
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2