Extracted

• • Target

    RFQ 096300.exe

  • Size

    368KB

  • MD5

    802c413ef3a40b505e5b8e2e0fc7bada

  • SHA1

    02f663db266a9151430cc3433b1497b170971769

  • SHA256

    7f4d53805b50624cb5e92857423661c3aef89e24c4ca63e79fdf62cbe2cb694c

  • SHA512

    d9e76abb4840e9d9f253c9ec710fafd69fad38c66097e9143269279ba48a668165402a46854f2052e520535299a6f410b34f0e23a4ca0ec9e398c4ff5a85a453

  • SSDEEP

    6144:F1PWgZQTC1b470TdNou2vOgfB5MRfCjN2EImHXkN:fWgD1OIQugfzMkjN2CY

  Score

  10^/10

  formbookq5ediscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2