Extracted

• • Target

    NEW PROJECT OFFER - 216.exe

  • Size

    1.6MB

  • MD5

    360d18d8a47c264c2e03cc8e06bbab7a

  • SHA1

    59183b9e4b41c8f90ce2f0dee4ee3e6e4e1bc2fe

  • SHA256

    94610e74b5926d5c7b4429915a41cef2434b364be578958b8a597a74dd5c7d7d

  • SHA512

    ae20f9bc3b19a88fd960a44151ead5a1f7e7eb3b6d1ae8382aa9eed584a6f090295fec7a75c4a76d4b4ad072e47b223acc036bdce249a4c75e9af2d734d4e8ec

  • SSDEEP

    49152:4AodtaG9kS2U84B+FLan9k5TRM9zloVjJOk6m:o/B1Ud

  Score

  10^/10

  formbookmd02discoverypersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Adds policy Run key to start application

    persistence

  • Uses the VBS compiler for execution

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2