Extracted

• • Target
    Request for Quotation.exe
  • Size 817KB
  • SHA256 f917034d08d7cc2d2af50ff28d1b52944691fba6bb96965e18948cf7473bbd80
  • MD5 e85a3049eb806544ac7dde3844b4ef2d
  • SHA1 a2bbb2e0eea141781d104ca9cb8d5b1965df5130
  • SHA512 ef5fcd05bbba1f1b357dce0cd391213d19a956a3c1cbf81c741c35fdd3641eed18a3065cdd754d61910ae104ac60a98b46d2940b59dd6dc6f735a26ee8838a2f
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookmy11persistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2