Extracted

• • Target

    roror9983.exe

  • Size

    260KB

  • MD5

    8f974c18e52474d38b4eed8a7dfe8490

  • SHA1

    4375371f00c0e2121a6b6902ad6ddd6f13836c23

  • SHA256

    2df9699c284bbd4241206481258a4c7e0a21eec0b4a88ab41cfd58de8d65154a

  • SHA512

    6b8739c43f2bc91de08990565fba3056fc8a881bdacd5d72df23ef2b8f9aff2854437cc0f439c91d868ae47b39248b791ae78cc293823eda345768c2872ccded

  • SSDEEP

    6144:PYa6W4IR3lE+7kCU7iUsrVSHs+Q8SpuccoPQuGKDTpIha:PY44I9d7kCbSHsWSpu3wHTSha

  Score

  10^/10

  formbookre29ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2