Extracted

• • Target
    Factura de clients_0010002345.exe
  • Size 453KB
  • SHA256 c8d85cc6740894dd1333bfa06c37b334a4f341cefbd13ef8fa803732aa688c40
  • MD5 ea4d18020e7f3f44fabaf4c1dd24f5a9
  • SHA1 9c40ca372df8dc8a76d6ccf62356859db368be4b
  • SHA512 1d784a1a77c99bcbe8c8fa8f179e0312ac069db3b181f1bc54c29c8f396aa854c9c9a898e2ee02f1e0090a3bfa4dbd367dacbe0604956796fe1eff09cb1e99e2
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbookpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2