Extracted

• • Target
    vbc.exe
  • Size 879KB
  • SHA256 48667ddc42d9eadc23dddc65f60f0de6e58afb6857953f282f7b02c115e9eed4
  • MD5 ec0b0a40c161fcf38f749cfbbe713d2b
  • SHA1 91c8db93ea8106afe01e6a152fe3cbd55b3b4f18
  • SHA512 2ca60e1f3d5bad7460a842a7bcbbf9d9f66ce574fbc54d5d68f5778e867e2129e585ada4b7c1d9d004e189309290dabced928903d159b5ad20368306ea1b827e
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookog2wpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Uses the VBS compiler for execution

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2