Extracted

• • Target
    REQUEST FOR URGENT QUOTATION ....exe
  • Size 445KB
  • SHA256 e38a459f721050cdc6779172eeda9caa5496f144e41fce503ca01554ada0a64c
  • MD5 3d864ddd48403f276e85010a6b452eba
  • SHA1 e5c31ff9abcad3751f08ed5abc15fdb05325a146
  • SHA512 8334eff88b1c9d128ef5807e56f9e19419ef5c947c3f231f5be0dd02bb4130cfefcf76116e0b8c5634e4fa10f926ec64212583dfcde0f8a7ff413e8172b1058f
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbookpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2