Extracted

• • Target

    rNO10865687X54-Quote.exe

  • Size

    703KB

  • MD5

    48763155ecb4bc6e86492a17ad92a798

  • SHA1

    0e601363e00c8fd7a9fc7a93e689d36d3b5008fa

  • SHA256

    edf6c2e805b1b232065ff74c1c2b8c8da24147c9ef17175547ec5fb905005cf1

  • SHA512

    a563b45539d3e7a14c6277fa38800d33e9378e6a0a2c7a2c074f921f48aa3d8bf5483d0ca14bb42b6182ec1cd48eebb45720fdcdf21263c3eca067c14887d878

  • SSDEEP

    12288:c570Eww2d1mbT6o22B0vUYmXsfMG8tae766R3TnuG9tUiWjndZp:y0Ew0672m8bskGS773reTjnd

  Score

  10^/10

  formbookhinfratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2