Extracted

• • Target
    Quotation.exe
  • Size 581KB
  • SHA256 16a4855bceb4df02e0478cd72972a6e7f144f2278fedb239c2cb696cf6bf7199
  • MD5 2e96c1ec66b1455de6246641ed3c4b15
  • SHA1 16eb06d1cdc43cbda6ea9fe537a17c1cc3e164e2
  • SHA512 82a4a834fbe7cd0ede62ea04351238383b48f65b0e2418b134756f5d32d8038b76af2f16880ef18e57ed84a38e917bfec4588e0a5e3ee98d31de981b8dfefab5
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2