Extracted

• • Target
    Doc-Quotation.exe
  • Size 460KB
  • SHA256 c9b3c7ce6446a64df017cf3301ab24a7993b1336befdec8bab77332fe783e4d4
  • MD5 f828a1f09517898f9de68b4756e0ca9b
  • SHA1 c94098bcbf03566719c07e204cdfb81c2155ea78
  • SHA512 e015897dbfc4a0d1ccf134415923ac33e6c7cb43eca427efa72249eccebbeb2985e09f184ff9cb1da6c00d02d4adf4f4eb23c1103b5a0fda75b26700b9f0a1a8
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2