Extracted

• • Target
    43bc92909f85f8597f8bc5b573438615.exe
  • Size 236KB
  • SHA256 b8b841d90fe179b235744659d1bf9cd9860ff6d081b25ef0d485beefcf59e28a
  • MD5 43bc92909f85f8597f8bc5b573438615
  • SHA1 4fb161ab3680cf037a8b5dce1c987785e7b5d861
  • SHA512 2f3e522b7c44af7d45974253e1895ff11d3baeabd0cbcab041261115e80f2f549fcb77ed15aa6c6234113c8745df95922930fc544c7319f09e501fe637556c9a
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2