Extracted

• • Target
    yy.exe
  • Size 229KB
  • SHA256 ae5df8905dd1b9de509e6764dea4c5571916b1705a129bddf2f5e2e554552acb
  • MD5 15e8e47561a1d4dd26c6ac339b34da71
  • SHA1 15066f6d3e8967dbefc48440c0fd305b0f62482c
  • SHA512 ad448b5c9c78479b4b6c5b50db36039e5217cca339a83b91a11877e11fefca6203e051239fa110363b0a2dc66e564987f8d58af417b09b6bc052ff10a9bd2126
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2