Extracted

• • Target

    RFQ REF-AJTAJC-766677ASD-ALJ-677888- (AL DHAFRA) AL JABER - SUPPLY DELIVERY AND SUPPLY_5763-BASE ORDER.exe

  • Size

    1.2MB

  • MD5

    861892f267f889518f3789ce0fcb0cf2

  • SHA1

    876802cd29fe8b258c6bdb94d66729ab7d28be36

  • SHA256

    14b0d4325eaa7ad618ebbd5484993f0439ca78b36faa5d2b99faf22703a21d53

  • SHA512

    e1f8f1bb11783ed6b653b792fe9562115e2f69d54932da7086105f92cc0fc11123a1513de17de4c6e7b28bd41089450bed84d9cfbee621034dd526e262d85ccf

  • SSDEEP

    24576:wqDEvCTbMWu7rQYlBQcBiT6rprG8aBHZ2woL3B6yr2MX7FJ:wTvC/MTQYxsWR7aBTEBpSm

  Score

  10^/10

  formbookot96discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2