Extracted

• • Target

    new quotations order pdf .exe

  • Size

    658KB

  • MD5

    ac891dbd7ffd6d31b32e0faf17f0c4d7

  • SHA1

    1f309140f69293922750d4ba6222ed6d2b42cacc

  • SHA256

    4555bb45a8a8d87ec2a075e1715934c8c43b4f260ad7d175668d4926cb4a664e

  • SHA512

    84bc226cb86b7ed4ea44e9fb66edb1fbe4d7da9a091c9546ee01a04bf8e479affd0724f46164e9359ce2abe4ea50db487361d8addc0fe761623471938f04bb23

  • SSDEEP

    12288:mio411R/5Pn+/Sp1O86VriHdf8KsPKqPcJlUqaW8ZpyJs7z2X9wn0LUEjwS:ZpPdDyiHdfYP/EeWOpUwz2mnQw

  Score

  10^/10

  formbookng04ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2