Extracted

• • Target
    QUOTE REQUEST #070011023.exe
  • Size 591KB
  • SHA256 ec07b80aca87a969c2f7c5c5a6ff490cb510c27dc68781e96facfafe9cbfb03a
  • MD5 047bf1e429c780d60f1db166b060f951
  • SHA1 e4b97fc55c65f8eb34e0ad99760cce674aac8467
  • SHA512 d8d99ec7c37e86dd95d9b55a3cf550114a53e3fab3ce3e7db8c56036d5224fbadd791397d54333f8d976702fa8da5bec87959545c600adaabccb9b9640319d51
  • SSDEEP 12288:KPi2Fn4swUndPr9fwlEP59sNYyH2vzkyL+cfyjxo+vJDr:iXn46D9oaMHE+cf++cJD
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookjy95ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2