Extracted

• • Target

    vbc.exe

  • Size

    823KB

  • MD5

    e67054066f3c12a83c34aadfcdb7c6d0

  • SHA1

    59a85a5cec540c12c2e3e03877a5272f1188e11c

  • SHA256

    7c641f905224b196dbcdabf2c154ebcfc8aba90033152e00661521339b074488

  • SHA512

    d67e994e31559fdc9eb62d1aa957260af548a3f905314494aa241e2899754fe7043280cf4588c284da42a77ac55ee1534a0c41c8fa8d8a0da4805efd289e70b1

  • SSDEEP

    24576:alDf6wlKqkJWFLlSCEPokFdFPesTwO6ht62l:alzEqlLUwkFdIRl

  Score

  10^/10

  formbookd16kratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Deletes itself

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2