Extracted

• • Target

    QUOTATION FOR ATTACHED INQUIRY.exe

  • Size

    1.1MB

  • MD5

    5af0b0a5cd8a9596dd5e85abeb93fd7e

  • SHA1

    d64312ca70f07d9d5dc49deab65026f1e066a579

  • SHA256

    886c7ebfad029160c6aab6aa288765e5488abb140a1c99b795951de91e370157

  • SHA512

    1e761a73c76c813c095aaf35bd9b191267a0fe970ab522ac962eec7bdfbe008cd1cc42f0893e32882aff3769b473209cbfef09488edb97b0c81f365ef38ae35f

  • SSDEEP

    24576:qqDEvCTbMWu7rQYlBQcBiT6rprG8agdNI9F5KBV8L:qTvC/MTQYxsWR7agdNI9H

  Score

  10^/10

  formbookbi05discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2