Extracted

• • Target
    Quotation Laminate - GIH.exe
  • Size 488KB
  • SHA256 8a5ae789ab7a7fe7d2d2bd23a633ae2d4a06b8b3dd93d7ea716847209067a92d
  • MD5 d8a13606c45b5b585402f009044a8677
  • SHA1 fcb23cf174509fa4e72be49eb7f47a85994014f5
  • SHA512 4835a98ace51207606b7a94883a89809295b36ba621a07f29e171624ba142b8d8143598e401718050ff06bf57451b200076e062152abcdb514bf40b8d1d8a8da
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2