Extracted

• • Target

    2.exe

  • Size

    36KB

  • MD5

    c2a39ff0162982b5b32cd40095681c40

  • SHA1

    14a7a60b9dc574b066ea39f59d72711dab9639c0

  • SHA256

    ea8636131cfb69ab935f05201fe8c285b53ccd379928825386b015ae7bb43809

  • SHA512

    3452c2dfa51691cc5da766542630a87c6e68cf93e5094981ab8905f7696e0c3c45acbf8f4a09b4410a3d5848d29d00b431b4b904472d7dbd1ed63478404172a2

  • SSDEEP

    768:pCpjO4tnumCBsT15CBHCrUCoTtBDtCYPB0t0/qigiltBN:OvnmCxXiltv

  Score

  10^/10

  formbookbtrdpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2