Extracted

• • Target

    2220944d9985a6843374f41b835a9825

  • Size

    272KB

  • MD5

    2220944d9985a6843374f41b835a9825

  • SHA1

    1929c4c64ea4cc18608eaf6140d1b28fa98d7ed3

  • SHA256

    3d5d3eb3853ff82697da75cf6da041f61f72e06d686010a02d52ebaa63ddca65

  • SHA512

    f1ec6f41d5b9ed14885df6e090a77b06c10f2e61ed36525dfd4e953a61c948da8271c2ea5e29dd5fcdba62e2acc218e74b71312e3ef30c54a87b387534e2c816

  • SSDEEP

    6144:5EtTqjFaFtV9KoA68Atd/Tdle0U0gCKTkn9om07/6s2eD5HG:5E9fN26ZtLlDGCos9ofis2gH

  Score

  10^/10

  formbookthl4discoverypersistenceprivilege_escalationratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2