Extracted

• • Target
    18.05.20.exe
  • Size 418KB
  • SHA256 69a951205cf548cd5e5f086531d65a20918ffbfd5adabb79e6834cedcb056627
  • MD5 9b7ae237912af6cbf53697410744187e
  • SHA1 8cef9a6c3b8ee264e72613fb522c6d42867fcfe7
  • SHA512 7ff5b9ec1b5776e5620db3f3a3a8986ad5a60571b41985ce4fbb758d71d246c24f298432669ae37c8fe91876b0f47da2e458ef093c52385c55ddbd87017b5886
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookagilenetratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Obfuscated with Agile.Net obfuscator

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    agilenet

  • Suspicious use of SetThreadContext

  behavioral1behavioral2