Extracted

• • Target

    THREE quotations.exe

  • Size

    766KB

  • MD5

    ae2f78ed3b32a4e7f969ce267778ac66

  • SHA1

    3b7c6425c65933d6b5dac6187e16a0597f3ea5aa

  • SHA256

    d5e9981b7fdef80983edcdda6b3e09870fe991720db4684986ceecb01d24506c

  • SHA512

    f21cf08412c3c53248e7535aa37430f314a6d8e900cc14e908bab730d1c1db555bb8875c9acca9940b1cb5ef6a7d1fdd58ee6abd9b6fe91bd4722d6037e5630e

  • SSDEEP

    12288:0uJas/16/YHmM9mARLAV+/3M73epjTDrFljb3m0z9SFOuDsDtnQkCEgYDjz:0Bs6cV9mA9Im873epjyOxDtQXEnDf

  Score

  10^/10

  formbookct45ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2