Extracted

• • Target

    Il nuovo ordine e nell'elenco allegato.exe

  • Size

    892KB

  • MD5

    9846100114f47c1fb95da84c09ef9f0d

  • SHA1

    715510bcef9517706b28ea506e39df8e4c8c4f5f

  • SHA256

    e01f8eb3903e53f65591dbfb5ae2dda83eb77b50ddfa598ca12fc627e35fe2fa

  • SHA512

    447b2bb4b7adc2ec150a324d1c2909b00742c3741af8996d043158436219def4899b44d69d6d1e518810cf945dc2d7b7e84e5952686bee858eb4123eb96678c0

  Score

  10^/10

  formbookpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Adds policy Run key to start application

    persistence

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2