Extracted

• • Target
    rro4665321.exe
  • Size 313KB
  • SHA256 29a5f9fd724757b3aa01833c68f87efdb8e191e363032391ec895a1d87dcb178
  • MD5 c5415a264543582dbe02dddefe099636
  • SHA1 2ce9180ab6ea128c370d0e0a019d68a0bc9db0bf
  • SHA512 b825a791fa9b48f2b81e5b6590c03bf6608ed73346a1ef14698a0157351f81ebb666703db787ddcf27fa6ab81349adb6684300ff7640e3adf13c05b7b06b7db4
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookr1e3ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2