Extracted

• • Target
    file.exe
  • Size 1.7MB
  • SHA256 3c758c3133fb2a7c7c51b2ec84028759bc99e1f3ca3bc22c1046d90f79801f76
  • MD5 d9169d17075bb755958f2ce58d8adc72
  • SHA1 0cdce4e32588aa24117ab4aacbe2d13be9f9d069
  • SHA512 2a5a14d9e9f784f284b2d1bdbb31831f01ef7aac749e445fe8498737da37b21695a6d0197839d57d85b8cb84939c011f38651c01d3261bf041df976621a54e11
  • MD5 SHA1 SHA512

  Score

  10^/10

  ratpersistencespywaretrojanstealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Adds policy Run key to start application

    persistence

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2