Extracted

• • Target
    rock9976.exe
  • Size 256KB
  • SHA256 06c8aa9110e9c50c51464d31ef28f3cab2efdb1ca756455f99f49daada571dba
  • MD5 5b7f594a4b8bfc07eb5221d602590452
  • SHA1 087a7b5db73d6030a25318a5c1ab901dfb0cbbdd
  • SHA512 ddf64a503280cf5bf9d139994b5109c0e9997f597aa8c8cc39c7ce963aeddff53080e4e33c8afa68c0b381a7ca74c0064f1ca905cfb479e328c432e5925b5df4
  • SSDEEP 6144:vYa6ip1WAK/RTQ56Hj5o8Xp24/jzf8G8z2DcJ7serItT:vYcfWn/FMc9152QKSZEItT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookt30kratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2