Extracted

• • Target
    2.exe
  • Size 36KB
  • SHA256 ea8636131cfb69ab935f05201fe8c285b53ccd379928825386b015ae7bb43809
  • MD5 c2a39ff0162982b5b32cd40095681c40
  • SHA1 14a7a60b9dc574b066ea39f59d72711dab9639c0
  • SHA512 3452c2dfa51691cc5da766542630a87c6e68cf93e5094981ab8905f7696e0c3c45acbf8f4a09b4410a3d5848d29d00b431b4b904472d7dbd1ed63478404172a2
  • SSDEEP 768:pCpjO4tnumCBsT15CBHCrUCoTtBDtCYPB0t0/qigiltBN:OvnmCxXiltv
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookbtrdpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2