Extracted

• • Target

    RFQ_Brazil.exe

  • Size

    665KB

  • MD5

    8c9063c775cdc83e37cc1627c2db4e35

  • SHA1

    fdb299c90896fe4da7296eea45e435eeaea01a93

  • SHA256

    ee68eb97a5b52851a5154c7078391f42c63dc93e093cfce520f57146bc1b2973

  • SHA512

    7deb68cc997fd3e049654c42c294317ab881ba72cb6bcb9d4ce0f499594d9c2a3a49125a217761c4a8d712e7838a50533bda464270cd309f3075fefe8fd91ae1

  • SSDEEP

    12288:+6n+XfJw1UN1PLRksi04MgJjIMbDu5innGNMd4MxajKRM9Hg:DKBw+JNc0EtSq5PIH

  Score

  10^/10

  formbookm0u5ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2