Extracted

• • Target
    Untitled attachment 00032.exe
  • Size 774KB
  • SHA256 0b2d1bf2ca75ec2f3db69659158e685cec6efb71e4be9e277af99b3ad0508c11
  • MD5 4409e2201e897419028a58a9d41e1e69
  • SHA1 41f62fb8e11de4e2b93a05cb806dc5574b40ae99
  • SHA512 5dc4acedbbc631fb460027ac966f22cc0d34c0f7dc673a48bff73d5fcffd87a691c4ef2204ee7d0e0343b6e9daac3f6c008c8f36f36e255dd8ae331dacd0744c
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookn7akpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2