Extracted

• • Target

    MSIC170.exe

  • Size

    226KB

  • MD5

    2eb5d3ef129f1a260919b4af6911a228

  • SHA1

    5abb21082895b7d7d2a454b3a8080d4779a2ed5c

  • SHA256

    d348cbf91ed1e466a286b17f93bf3fd27bb01de6ba91c76bf586788bf16876cb

  • SHA512

    9c200d65f35cd6148897ca19d92563c1210abfb614e21d7f0afb749daee1b690e892ae5867d90b8ca69c77fc6b71d57325cb9f04e9c79917477537f5a8a8da5a

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2