Extracted

• • Target
    RFQ.exe
  • Size 930KB
  • SHA256 0713f11756d56d7b064989ad057ab768f0cbef644ee45b96f1ef2a9daefd0eaa
  • MD5 60771c22b7d2db3a7b631b4cf2cc585e
  • SHA1 3c9d6c35cb4ae36f243b68598fa14a99d9bd3ce3
  • SHA512 443f921a01e6eefd96474614f69756a078fa4718621de2af2fbaedaf66c2e700f6f18df551f10ca1e795f97773c1a9488455c1a5ce69734b5e2b47c71d5f4b79
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2