Extracted

• • Target
    RFQ #17092018A.exe
  • Size 785KB
  • SHA256 8e11fa75359ffe3024bd4f57a0f3583db152f8fea0d4e5621bd5d058b0b402a3
  • MD5 4ae4b7cef06df875acc8a1a705065f6c
  • SHA1 c9b298c9a4bbe72194b5bf7b332d26b4d1698c72
  • SHA512 b1103fa4de4da58a19e217bc56f50aebd069c4b594c05c9612496a6a60bf984e96bba2ad7a78a84a78ed6018c0a44daf69b82a232abf20bf73713fc8d46bcd67
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2