Extracted

• • Target
    r8903321c.exe
  • Size 234KB
  • SHA256 9c1d6191badf084113871feba0049fac8a2bb5761136877383579cdcf7cd781a
  • MD5 d2fb2971a57e525d77780382d36881b9
  • SHA1 e1d66e1948f9914dc867e5e5c7cb48987f075990
  • SHA512 4a964673301a64eb93686273deb23636bd36a7e7691eb4dc47c1be76d823d62844877124433e971ad2ce4cd38757e25a241b23ec29ccbe807df92005ab87a68d
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2