Extracted

• • Target
    triage_dropped_file
  • Size 288KB
  • SHA256 e29100d2ecddd199e9b4b40d094b36f7a67981393cf3f58cfacabf91e3dd7eed
  • MD5 25b24f0197c3638f1c605b1937bbf6a8
  • SHA1 69ab50a310639287cd39bc6a3c4fc222e5949195
  • SHA512 b2037299286138df24ef758fa09289c689373469c0a9f431fc473ed9c4de9431de853bfb49df29f2b0d33342bdbe5b9b0f4a40075fee62dcf78b53216e5f3d09
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookj1u6ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2