Extracted

• • Target
    AGOCO RFQ NO 105017.exe
  • Size 482KB
  • SHA256 8e7173102d77a6ed527fc3e783be4aa446e757f4417d3fa1f60f3e9cd0cff4f9
  • MD5 76661f98b6bd857c7a5aed76da3552ad
  • SHA1 176b8966941a04bf833a19965eb3b8b0a9a9f3f8
  • SHA512 93a4c720727f4ee9de433bf0fe683fce76c45bc19617bd45d6db4f9aca5bf091a346243e51d4374cae0cb7d49f78d3036d185037c645d3bea5b55d40fcf12132
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookr3hgratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2