Extracted

• • Target
    Request for Quotation.exe
  • Size 214KB
  • SHA256 0673e3ccaf8f4bc60b304e94d608fb1511d2ea7644c672563b6a81b5c3338c19
  • MD5 c4113624b8037af315e5c2f75d4f6580
  • SHA1 c34d1c4d260fc9e5a910099aec296d431236f5aa
  • SHA512 892df9c9502b08d4c70c4968553daa6fca3deb2ae2f75b338f7ad40eca91259a1da0e961bf1ead3053674be9ec2dd85bbff105580040d0b20808c2622940dff6
  • SSDEEP 6144:qweEpMOKKcq1Y9HYwE0GYa+2GqDJZuIwH3XoY:bMGY9KN9DtwH3XX
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksm28ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2