Extracted

• • Target
    Quotation.exe
  • Size 498KB
  • SHA256 4e712f5df51bc5970b962b170cfde7a6cd20622ac67164a6f2101655a8a7d7f3
  • MD5 31dd94809b63dec3786dbc56133b959b
  • SHA1 66fd52f0b2e2ff4bd0cac1fc8fb87e235acd15f3
  • SHA512 0a7f1e54b0d2db368e4ffeb3bbc090f0d980bd710879d7b3f15e560b555daa5d68b65a6e9ca23e08b81566406ee99fcac060f0cba11f27ccee7310670e4c00d5
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2