Extracted

• • Target
    vbc.exe
  • Size 965KB
  • SHA256 3d98af517d49b15dba615482257fd8a72f8810b0d4f18a47fce8bf06b3372fa9
  • MD5 b2b54e7746c487f283068b5175671d93
  • SHA1 20c35e295f12cb5e057b115eb8a2424dda1b77bd
  • SHA512 0c8215fe90743b8f9f8719581b9f70406d614d659e1bfd632434c50de358630801877eef8dedbbe074f88356a01125adfe350996fa07ac86f1f4d6f577d84f4f
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookm2i8ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2