Extracted

• • Target
    7a71fc7a13b8b4cc509aa9f238e80dbf
  • Size 292KB
  • SHA256 9bece1a915a3849979795cea77094ccf1c1bc8d93b33ef05a84c8d56988c2816
  • MD5 7a71fc7a13b8b4cc509aa9f238e80dbf
  • SHA1 9c5a2f5dc83500755c16f4facc98fbf5efc8a1d8
  • SHA512 bf4f542dfbd8f5ec8bdbf5748a242ed6595ea08026713c9d4c9950af5c4901633747dcfe8c715e73a12dabe8d73a596e827924dd89a1c0b4149deef3ecc06c27
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookby73ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2