Extracted

• • Target

    RFQ REF-JTC AJC-QINHP5-TIS-L0009- (AL DHAFRA) AL JABER - SUPPLY.exe

  • Size

    1.1MB

  • MD5

    471a314fd2f309be7ab062044e12f0de

  • SHA1

    c1058e3787505af5a4df68653625158f8c8ac4b2

  • SHA256

    5903a6e132492859e71ad0542938af1fe807e0110fdb132725b7e6fbf5e94b5e

  • SHA512

    f12355bcb0c732dcb1f70abae4de91210cbbb8711884b2593048cf5edee0d08a2db64eeec8f8f127ad33e58eeeab6b9eeb577478c037efdedc0b3a0051994fef

  • SSDEEP

    24576:qqDEvCTbMWu7rQYlBQcBiT6rprG8aWnmfArkK/yaFuR6i:qTvC/MTQYxsWR7aW/rk9auQ

  Score

  10^/10

  formbookpt46discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2