Extracted

• • Target

    [RFQ] New Project Items 7519 Quotation.exe

  • Size

    631KB

  • MD5

    d4e1ec4ec4ca6e4807739df8d64f4943

  • SHA1

    de5e4589ed7c9b727ae72abdcd80f8c3afa5e051

  • SHA256

    6f30586ae0f10f48d85d4c59c351756df1754de806b4aa52078bde8d792437ea

  • SHA512

    7d4c3f09108f5519c4c4d054ff0ea31f9cf3dedeffbad698ead6dd5afb94191527d329e4645f02f1d96a4a6910974c0d09468b290eeb111780bc5d93cf3d7bad

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2