Extracted

• • Target
    PO.exe
  • Size 260KB
  • SHA256 c96178775d7f8dd8b06a4e59aad0367f36abc11680081acfcc2b446fb0ee28b1
  • MD5 dcc82f6d02352ba09401b5e5903fc2c9
  • SHA1 1fc8ead283ee92f4f1c7b3638d6cb91a9a2a6a8e
  • SHA512 714003eb53f9a2d3198dbcad9d666e2d5380415f3d5c4ba5f8129cfe585fd21453f6720995ca536151fdd7787dbef3bb5bc8131865b9b8905da3311bf9bae541
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookw6yaratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2