Extracted

• • Target

    Urgent Request For Quotation.exe

  • Size

    836KB

  • MD5

    d88119055f1234dd4459d7347b045033

  • SHA1

    7b5e72f10cb6c61f6cc3deb205d86c866055ffa0

  • SHA256

    590277f960d74add2860c7332ae427eaea968bdf3bb4d5a8da5563a3115b16f7

  • SHA512

    8fa23415012d012db81b9940a8a1c17c0de04d408702de1d345b31ab43d9b64f5a97894d5af82d559979b7656716843862d3f9feec67f366e074bcff6d8bcaa6

  • SSDEEP

    12288:FcGHKlNiKXd9nfj0ygyDyl/56XUGQ+Pb+jjmaZgKZ/nXt7virmWhlGLaQYI:e3ieb0yGxmPQUK

  Score

  10^/10

  formbooksnkyratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2