Extracted

• • Target
    QUOTATION_#5.exe
  • Size 376KB
  • SHA256 e2e86de59b03cd68c6795d391938d75dac7fa0fe0d5bf497a075402686eba01d
  • MD5 03db6a5b5fcddd3568895d9212b1c69c
  • SHA1 7b3686f122ff9852988bec23b9370e02105f1901
  • SHA512 21b7a53e0bad643033a4026ac6108205da8ad03f90b34c6083b94c0984a091ea878a42abf5fc9ec4bf7472cb0415fa4154a359e173ec4762237ea0576ed5584b
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojanpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2