Extracted

• • Target
    210325 KN ORDER CONF.exe
  • Size 590KB
  • SHA256 2ed8aeaf73ee1a3caf7eb0be7814868c4100efbe1b021e2d964db3b638dc7f3c
  • MD5 b34eb2c78f828a6876d2b2e750f98029
  • SHA1 11ae14db8dcd48c633327905490f764b75bb7171
  • SHA512 75b972983966674925b3f241b0bc2df595f27f41ac69b2375cb432742f2cfc1cd97e5c4f5cb962afeed4f30de8470562643f9cc5603fdc3b5421f9e4e6efab53
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookgd02ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2