Extracted

• • Target
    Shipping Documents pdf.exe
  • Size 392KB
  • SHA256 ec34c3db0d2c865486e52760c0d35dab95adcb3544f2e03f5023495d112d64ba
  • MD5 322bcf9b3f0b67dd9355dc8a68a3e121
  • SHA1 5001c5fb341d70009af0c19297e8d285878f9a08
  • SHA512 dd8cbe76964c4668fda50eac9be61a5ea284e2153a22261b13b589a31a4b05b8ac91707995e7147159c2c27575304a53991ed9ee05faf1330b944e2d487e8024
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbookpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Adds policy Run key to start application

    persistence

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2