Extracted

• • Target
    2220944d9985a6843374f41b835a9825
  • Size 272KB
  • SHA256 3d5d3eb3853ff82697da75cf6da041f61f72e06d686010a02d52ebaa63ddca65
  • MD5 2220944d9985a6843374f41b835a9825
  • SHA1 1929c4c64ea4cc18608eaf6140d1b28fa98d7ed3
  • SHA512 f1ec6f41d5b9ed14885df6e090a77b06c10f2e61ed36525dfd4e953a61c948da8271c2ea5e29dd5fcdba62e2acc218e74b71312e3ef30c54a87b387534e2c816
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2