Extracted

• • Target
    rockkkk364531.exe
  • Size 293KB
  • SHA256 dee29915a45463d25c7f4de2abac14269137c359f848baf8ad4205fb07e2fa0b
  • MD5 1f7e51fdcf2a031ea1cbaa4d38029c7c
  • SHA1 172685254376d9de55a042fd25d8a53d782ad0b3
  • SHA512 2e784f277afd0d735b219bf4181a21235f5dbc6387e7c45a4ebcf10a487dfa57d42d513e26d3adb81a28322e47cea24a33b0fe68341b8a0fd6c5d17061287031
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookrv12ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2