Extracted

• • Target
    rocrocroc.exe
  • Size 236KB
  • SHA256 80fd67b02253b03398a151f7c5392adfb32ad43a619a18c3dd8e2e8a876e9139
  • MD5 eae17351acec953c1a7e8239fbaab556
  • SHA1 c0bd8ba5b619d921cc8cc25d7e5275101b6ffadf
  • SHA512 f50a57b890d1b1f68dda990436b279620a5d404ba09038c36d8779720f3f8436bc99675c5402752d6101289ed24e95c38b6c2d8b2e970d0f306608eacf61e362
  • SSDEEP 6144:/Ya6/Wj0O+Og1aSJnhjrCCixCiK1Wr4fpelyf:/Yt41+Ogc4NCCiZn0fpOyf
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookt30kratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2