Extracted

• • Target
    Swift Advice RefGLV501756103.jpg.exe
  • Size 444KB
  • SHA256 69e2e974e72cad787eefb413d7a2cec8bf4f71365ac46093556a8362e9ada553
  • MD5 a232a361059478b456ffd614067feabf
  • SHA1 4b842c05a612dc77bf6562aa75007f639458dd3e
  • SHA512 e00a82291fd5ac4127f30a156079ba3f2c9821dbc658a6c74b1b37a4ec94d6925486870d26122ce401225d306d9d7b472e4cb4f851c02f415bfc46dd39af33d2
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookf1s1persistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2