Extracted

• • Target

    ELAN#0472940573000.exe

  • Size

    40KB

  • MD5

    bcc10d614981f0eed446306185ba0a3a

  • SHA1

    cc400a605e2febdaa27b5887f55a922372b6e298

  • SHA256

    4b7c88deb8cd20b960e2d396f24708a6018d2a1483fda51b7444b0685b3888da

  • SHA512

    87f97bbe1a4c73b93a34ac6efa0a6b8722b0a43f17b9e805066539a65eb709289ef26d4bdb9f53e174cb41116a9e0d26014495e3b6e90470d631b68c6f1c7147

  • SSDEEP

    768:W33QdsUZYRx8OC0cKRSbA7vJRc8GvPQoA0BAtHzae6M:WHQFY8OC0VSbqvJRc8GvPQoRBAtKM

  Score

  10^/10

  formbooktomxdiscoverypersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2