Extracted

• • Target
    rocviud123.exe
  • Size 254KB
  • SHA256 90661f85c7864f95181eceebf32eafd0b4b166aebdfdf5529edfc3a3dd6c0715
  • MD5 9bb0511e947ca2a8ce34153f1b76400a
  • SHA1 311b128e5ef3995c04a754679237b778e85e7203
  • SHA512 9741900e30ae1afee32dad16aceb55a98826be07d946a2d5a8dde8baeb5ad5a91ae9303b51f2a17d334c9335c63932f323f08102f9dbf287145f81c13f8a2bbf
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookrv9nratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2