Extracted

• • Target
    Packing List.exe
  • Size 309KB
  • SHA256 285cf3ef067e949b6b0e413f43b5cfe89504f3e427c4387bd76765b98d059a15
  • MD5 6c925989c90f3ad91f76f04816800bb9
  • SHA1 66de14608e25bafcf7e5adb7ecc5d6a302a9d5c3
  • SHA512 96f4ec5ad8956e4a03a7e3f4e7ba7ff64749f195054d1d3fd6536b46404b282532358283839908d3ed0ef4eeded9ae262d51a1c519353ee76e9dfaf94db9d60c
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookb62nratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Blocklisted process makes network request

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2