Extracted

• • Target

    original documents.exe

  • Size

    279KB

  • MD5

    0f9a52111f8c63b86a08421f2fe42786

  • SHA1

    b3b277e8f9d73636a87c6b09f50f63dcfb25b7dd

  • SHA256

    37e98fef85aeb5097a5091d11fc844487642873e9e06a8d0734785dbe1ad1315

  • SHA512

    0c157a405f24e59e2e6d00e419c83fd68fec1893fe642fe5d3c6168e0ec74b6f247d28f728fd9fb7eeb6fbba2ed1ebb335ba301784cdf4d2705d44dce62fa2a7

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2