Extracted

• • Target
    Quotation Request 18-08-20 PDF.exe
  • Size 379KB
  • SHA256 1bfdb7e4f0aadba330b6017c2608570e791bfddff789d128ecb5ca9a5a06e6fe
  • MD5 8410b850e0f60c49b8a2e0e201e1c74f
  • SHA1 2a3fa9d252528596b45fd0bc69ca3e82648a2709
  • SHA512 3dcc5d4990aa1a9a8bb030bd7255927baf5cac7ade9d89b54837d42674f5d1cb120a05fb81faa4e69129d2676fa8fa3aa6d9b05360efe628ba944b42c7ee3789
  • MD5 SHA1 SHA512

  Score

  10^/10

  ratpersistencespywaretrojanstealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Adds policy Run key to start application

    persistence

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2