Extracted

• • Target

    Quotation Request - 10001.exe

  • Size

    974KB

  • MD5

    8adef204222f1f04ca7cab99cc19acd0

  • SHA1

    ca9f9f95b42dd59cb9f6025b2b2bca16519fc00f

  • SHA256

    90212e18e6b4b235bbb6f4083bd0a2c491e0be12edc600199eb0ed0839d9a554

  • SHA512

    413e126fd5598dc1cba282595cad155d841d8222f861e264a857ef956f1d8f3deb63ae92be12737de3e3b89a5c51cbefa544500885127a3429bd7714ec6a89d5

  • SSDEEP

    24576:sp3ym7jOPcdHAcWohx6n53nD29Zgu/P2Up+L74mBfNUstzo:sp3fHOPHohxC3nD6Zgu/uU

  Score

  10^/10

  formbookm5oeratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2