Extracted

• • Target
    21a8347b_by_Libranalysis
  • Size 256KB
  • SHA256 9d090a84e1769af41a7724bfbc082e60f50a8a10cf88378a4c3ca24420aade71
  • MD5 21a8347b84922ac907261438eed11425
  • SHA1 2dabb8d49342a472f3d2a4410306e8aa76a4bb6e
  • SHA512 eddb89ca0d4fd1051e7fe035efe820eee834f3720b60523c11d1f7822536ba8e4a386fa3a25647d55ea50dbe4c68f1d6350b95ab5be07c1343668e02f81abd40
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2