Extracted

• • Target
    DOC022122.exe
  • Size 773KB
  • SHA256 f80a58564f070acf295b2a76ce6331402b3e9e71eed07cf3e017376e1bdb0f36
  • MD5 bb223afdfbf620b0b9150cc25493fb4a
  • SHA1 393f98d1d69c52cdf38e44b0bffcf6bddcb66b14
  • SHA512 f738f1207628c2d3114ad8c7a20ef2840c1be899a14e9cd3bc15379b08591e97f239648e5aa6e4d6cff47dc02947af020668f6eb2f6a3909b132e448fd4fc41a
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookmy11persistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2