Extracted

• • Target

    rockcor908.exe

  • Size

    274KB

  • MD5

    41d5451e60ff3e73b8443b3cce0a6cb8

  • SHA1

    f50a1a4d2088bd33f3443285bc2ff0bec36e7c23

  • SHA256

    33e3b47eae5dd2c0931b64dab1fa56868276ee8cadf3cda23e4310e7e640703f

  • SHA512

    101b7da4dd71dbbd4989bc729f64f3380476892040464cc789a8fc18a43e27709c7a024263011ab5105a881fd9b7c06a8961022360f18bd697a3b7d0902a1987

  • SSDEEP

    6144:/Ya6aRt/CCxhfRFdlGu0GISPDPCU8TDsTlfHd7i:/Y0z5hffdlGu0x2TxTd1i

  Score

  10^/10

  formbookre29ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2