Extracted

• • Target
    Quotation.exe
  • Size 1.2MB
  • SHA256 d95b5a031caa4dd8c0a78c603836756741a40b6863216bd8ff90583a4e2a27d4
  • MD5 45c6554fa8207c600a93f96091f9f54f
  • SHA1 3e1c0010774143b1a90d4e74f36561422688570a
  • SHA512 00936b8abe386870ade0c3529c4d48f658a0f410741c01f578518302dfa85de6ba561abacce028b18282819d869cf559aa9b3b337d17677812f184b46418052f
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2