Extracted

• • Target

    753421a6d959e6090a40a386b6ed36e0_NeikiAnalytics.exe

  • Size

    508KB

  • MD5

    753421a6d959e6090a40a386b6ed36e0

  • SHA1

    27bdba5f103fc602c1f20c29d8dfddc2b1d15e1f

  • SHA256

    6348dde734cecafa6f1c1c5680bd16500f467e73815532e223a05a1e4f69be15

  • SHA512

    844e965f5d9bafe42b0092ab727c90bb007f29e13713e6c72ce7b73e74cee0994b40d85e2def88726c8bd68543d6f28328beb92695c9ce238d3312898cb72c64

  • SSDEEP

    6144:0mI/OTlroO0v4K7n9nqnakkytivbY4AXz8ADY5lQG1k1VTGPfPhsVDil9QbUnq9d:VRlsOw5Eak0MRX9W1a1I6TjwE

  Score

  10^/10

  formbooki19persistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Adds Run key to start application

    persistence

  • Legitimate hosting services abused for malware hosting/C2

  • Suspicious use of SetThreadContext

  behavioral1behavioral2