Extracted

• • Target
    QUOTATION-Spec of products_Pdf____________________________________.exe
  • Size 808KB
  • SHA256 8a44adde0f3cad02f2cfd6f4694a8e4455acd991bbe25520cf6bafe0839ed09c
  • MD5 8494b0687ef3c40aa512e481b465a6d0
  • SHA1 23473f669a63d834ca9fe4bc4286b9e8f9c75447
  • SHA512 1978ff8310ddc6122661ecd441567495f78a4bc9852b0d19e1d070f32c36b6a2c23c169f90a5f0e2e08ca4a4dd2640dffb8f2829c1fef384f95915ad4d599e17
  • SSDEEP 24576:dh8eZyybHxM6tBhP9Qr9DLZf6XLMkrYX:dhnysH261P9U1LZuVUX
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookmtbjratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2