Extracted

• • Target
    rockrocee.exe
  • Size 240KB
  • SHA256 9ffd0fab2b4e2feca4aabe82f3da2f0621fdfab109a41020d42c749985ea67d8
  • MD5 4480c12911273920a05b5f21eb0c1c8e
  • SHA1 af578feb47efb4acf537c4c58f1ef0ca6cded301
  • SHA512 8c4a56cb1a3016885ec82be7b4aeafa01add52f11f772684384c2ef7774c6e8b6fe45d1ce7ddb461f6f9c9f492ffb37a9d137a7664287ac4170f753bf9d3e8eb
  • SSDEEP 3072:HfY/TU9fE9PEtupbDDWw9ghyd6XRBz18Wm4mAD+plb/s2u/SeS3JKkaCt2+eNN+n:/Ya6HDDW3cG720mAK35MTC45atV4m9cQ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookt30kratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2