Extracted

• • Target

    nvpn.exe

  • Size

    310KB

  • MD5

    da83ec739bfe2751dadf73b88a2d4de3

  • SHA1

    5122f9be87149ad355f0cbf33ca3ae603432b5d2

  • SHA256

    dc999aa2db84e4f91022be10a55e971c49da82960027b7482b44856fee46f9cc

  • SHA512

    358679f4da6265685f6d41aa159220a3dc80e6a76b0dc4e57bc548394acf6507622dfc09ef86dcb892e32d72c6be5af1fce57b3562d4bc8d3bc646ae3afee8c3

  • SSDEEP

    6144:LnPdudwDzV7hvMwtSPqGas8x0UAHsvEt57FFUxgbddgAcuWm5M2:LnPdvhsZyAEEvFFUxgbRM2

  Score

  10^/10

  formbooksy22ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2