Extracted

• • Target

    ETC-B72-LT-0149-03-AR.exe

  • Size

    228KB

  • MD5

    dc27e4474182fe41de857278c2488574

  • SHA1

    0b5b93dc9e3389de1a3d04c4d03fa5c0532aef1e

  • SHA256

    facc651f7697bb357b528e0fdcbfcb0601abcaad0f2bd31eee54792aa8ee66e3

  • SHA512

    9025ad32d289464770182ce597838a1a0c79aff8a337c0e9a3a5ecf4f7343f24029a7551c6a6559d36a6e4e624429241445984ef5e987c88952eb87529f01fed

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2