Extracted

• • Target

    rockr9905.exe

  • Size

    238KB

  • MD5

    d16f5edec7de7c9b263ab7ff62a60459

  • SHA1

    e82c3dc90322e46a8fbe6f29648394869246f5ca

  • SHA256

    e407a4227243f0b4c73216becb3bd2b94648ef85dd52568d12e5ced2f5b9dc2d

  • SHA512

    088fdb92d75316b4f40a057f7fa9fe01683b7373176f610cd70ec3ade3932ce69b395c2a206ae46b8d020db9ad94d7762ed0196f6f4136f80dd9d4290861efae

  • SSDEEP

    6144:PYa6Hq+BjzHgjeJFLx+TVlYYhSYo+dSSq1/j:PY1ljzHyef+VyYhSY/d5qZ

  Score

  10^/10

  formbookre29ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2