Extracted

• • Target

    8649b814fa724e40e4dae7cc2d9d727da957b760e7d28d3af04a7c1011311a00

  • Size

    599KB

  • MD5

    92592b4ed9b80ddab77d8e19d2ea120e

  • SHA1

    aae8fdb85bbf71c66d6001be2302018f97ea3375

  • SHA256

    8649b814fa724e40e4dae7cc2d9d727da957b760e7d28d3af04a7c1011311a00

  • SHA512

    3e6a4ec71c2ce0d2989325f09db6c9189c8eca95af9ea1bb749436f79826afe5a12df2fe6aa2bc2cc6b02fe91fcb230b9cdb73ff0ac8ecff4c92e910bfcb3352

  • SSDEEP

    12288:07Io/7u4UlyVVKhl3tpBuivKhwtfgfRFmFeytYY2j3ga0gvV:07T7cWm9pBqQfScFeUYY2jwa0

  Score

  10^/10

  formbookdfcdiscoveryratspywarestealertrojanpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2