Extracted

• • Target
    FedEx's AWB#3366674038005.exe
  • Size 1.0MB
  • SHA256 1359549cb60ef5ca5fca53dcc5a47d9552fd5e24afe09ef563f18051417fc4ac
  • MD5 e422931de0dca3bff8ff81c0a10ea72d
  • SHA1 5947e3aa62a610bcfe5eee653dab91544a04005a
  • SHA512 2b718517420ae3522a2e779421607181ed65d76c5bebfa81ef718a14d0bb68adecccc0eeaefdec5fd550cb2001c003f9d18206d32aad125f94835dc8449d6513
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookuc04persistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2