Extracted

• • Target
    Swift MT-103.exe
  • Size 1.0MB
  • SHA256 f5fdaaa92c4b2a31955e4a21469d2562c2b4be7fb1eae2cd06b5bce77dd25b5e
  • MD5 c8b18ed72f85f2254d1621c4aea2b0fe
  • SHA1 4389ec0c24dd47818c3410d3fdac6e964bcd082d
  • SHA512 770c3943f0759cdd726c3cd7e299c052f82439d3a2d8967c89590f36e0b030e85aebf13a7e700fa5953e2b76be8e1b451e44243b02fb67925ed994e3ba6c4965
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbookpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2