Extracted

• • Target
    bnvver12345.exe
  • Size 258KB
  • SHA256 d16da4e6a63f26601dd3c961f31708db79be1aead7cf3834fafa47095b1a45a6
  • MD5 81a3fbaed8ef79687f45554966985c20
  • SHA1 256c21d905602953d3beff30aba518af5b9bef2f
  • SHA512 589e4211fd177a11bffd16d5ae32abf646e94c3eb338a2ce9c3d8eb92581fd2a45daf03b22a26bf7347db4ed3280046c1d5f4c14d3b4f3a541fc6f947a8d54b4
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookrv9nratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2