Extracted

• • Target
    Quotation.exe
  • Size 500KB
  • SHA256 dbdd8dc5bf8c5f81b9cbead4224bade6cd697f6f00cbab59bf084f6e39578a8d
  • MD5 0c51f293cf4446111ee3074e9bc538cf
  • SHA1 4772c6f89b277885a1d9bd50fe792c1190f3ac5c
  • SHA512 1af1624ad766ba99d2ccfed79d72453e737a57c8ec5bd8b7e79514807cfcd8084786460a71b7c44adc43a738e77dcea1dbc64e88065d50ef4537215efd939162
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2