Extracted

• • Target

    Quotation.exe

  • Size

    1.1MB

  • MD5

    e5834e14777d7df91dc61f75c796e07a

  • SHA1

    1307720fcf7f9df9dc5d3f7393229b92f56b2480

  • SHA256

    acf03676e5dd002d0dc94a2b50e83dda78d287ee9b07ad2c9659688310015820

  • SHA512

    048b73353999a417d239f488743656dee95b0b3b8ed8a0c8adca5ba9474ffbc2d22223d51e4b852bf6bbb189ad3bb127ae59f2d062e8171f77b0223b4bca31cc

  • SSDEEP

    24576:/qDEvCTbMWu7rQYlBQcBiT6rprG8aLHqGzPdlAx:/TvC/MTQYxsWR7aLHbzPD

  Score

  10^/10

  formbookty31discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2