Extracted

• • Target
    Quotation.exe
  • Size 495KB
  • SHA256 718d659864d771ebadf82d8b5461d39c2bd6bd514ea2d2273d2821a23ab28ed0
  • MD5 b66744393665b807935afd7dc809a28c
  • SHA1 35aeee01910d9c97704d181c119dc08d08cae232
  • SHA512 722b9a79b147210026f2980e206e1bf28673c9eaafd60dd16d180b9c2200482d10b658432904fa5ab5a3ed5ff6eb47ddbccc5a7111d1c3d887ddc5d71a0b079b
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2