Extracted

• • Target
    8449615a04b7ea85bc73fbede0cf0d95.exe
  • Size 235KB
  • SHA256 a7d608238504263bc730a5744ff6808c78d3003c658db1eec8a30ffd5152f257
  • MD5 8449615a04b7ea85bc73fbede0cf0d95
  • SHA1 0d07eb7a1fa144e4fdf29417ef1dcef4715f270d
  • SHA512 8cebba14354b7f60a53ae78f2a36514a4fc6a637e90fe126f32c4c62e4bdd571467db32f57ab65f276c1973edc49e431a3b43889113bd6adb9cde034ea7192df
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2