Extracted

• • Target

    SWIT BANK PAPER PAYMENT.exe

  • Size

    229KB

  • MD5

    8f885ac76bebc591a72f73eb3deb3d73

  • SHA1

    82af5568c6ed1af66f1f69616fc836e4c31cabb0

  • SHA256

    7f81bdd235dca279812a46cec7f585bde9d681906dba1398e8ac86dfc877d079

  • SHA512

    fb942be934ac962294c6534441c971e491f33f9d72c97f7f533edcb94e531ab675748e7775a663f133e20b3997f34e135ed663957cb8bb9ea7543fd2d2fb9d00

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2