Extracted

• • Target

    98c87992_by_Libranalysis

  • Size

    734KB

  • MD5

    98c879923a9cd4da08959fd0318c3d35

  • SHA1

    a3f7a4ee4da515858e2235d91c0206cef37446a9

  • SHA256

    960cd364b10841b71b638aca1807d5667cf340e76102389d45d7df4c17401ed2

  • SHA512

    5294f7018e8ede10f69fef71d15613f067f3d334d366de40949ca9764a82980031785b6c77f798d8f31e8b026a1531a0ea99cefc9812b51672d89e6ec44c612c

  Score

  10^/10

  formbookpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Adds policy Run key to start application

    persistence

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2