Extracted

• • Target

    RFQ1 REF-JTC-AJC-QINHP5-TIS-L0009- (AL DHAFRA) AL JABER - SUPPLY.exe

  • Size

    1.1MB

  • MD5

    29ce40926ebdaec5752f14be5e21fbeb

  • SHA1

    df0e8f649c9fd548eb7d42eed2884cc68979ccd9

  • SHA256

    ee71ad1c0362898a774103c743ef574c6a3cf37a3556a9eb8809bc411cd179cb

  • SHA512

    8c8ef0a9d99ff00111d6d0d6ebda2b65f812b7d1f93ff36194c7e73a6ff70138225d3a626a0168b78f64a51e443fe588274c18f0220ad05b648f34c92e540e5d

  • SSDEEP

    24576:pqDEvCTbMWu7rQYlBQcBiT6rprG8aSuK06lMmt1mI/:pTvC/MTQYxsWR7aS906lPt1mI

  Score

  10^/10

  formbookot96discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2