Extracted

• • Target

    PO.exe

  • Size

    228KB

  • MD5

    2593eef7b38e160b9697f2479fa8843f

  • SHA1

    25d4d88f321321fb5b2b316fd5dbcd5bb144daa1

  • SHA256

    b35de004189f271fe754dd614e5fbbc299425f5aca9ebf1f935bf26696964853

  • SHA512

    c5beb57aae9c18ca5d7d73954216abc6a07871666d08a654d7b5d8e1d25b0defe9ca66eee77325bed03870a39757c85df13f868472447369bd2903ba05336a21

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2