Extracted

• • Target

    rock997.exe

  • Size

    281KB

  • MD5

    770b0aa37f47b6bda2c4aa82b686afaf

  • SHA1

    a7f4627372d3277b5456f2b4ff9f40aceb7db68c

  • SHA256

    c02565873b8fe1fe3a19ee5bca4d03a861d4768f48f8816311792b7632c63107

  • SHA512

    1839733c9d37692852f3c5e604e5f16c12313f0f937d1f3a055eecc787e6c1ed9037b16f7df1735e9a04a983b1ac05505dd48f36dff203a0765d08fdef02e0da

  • SSDEEP

    6144:/Ya6Nfn8Qna97f4k9uCH1+TmXbXPT0hpDMfWhj7U7Pitx1uK54IR0ycAJPI:/Yv/8Qna97A4nVOCT04v7atLuKmIR0UO

  Score

  10^/10

  formbookre29ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2