Extracted

• • Target

    BASF PETRONAS Chemicals Request For Quotation.exe

  • Size

    1.1MB

  • MD5

    66e0bb9c0260fe4eb10e6c6868ea2a77

  • SHA1

    f9ca35c22c827757b168be84d7ff746be855755b

  • SHA256

    cfe4c0048184b00ed3af5a0a191baf693752c793f010ae05c3caff2253052d12

  • SHA512

    3572972cbd1f08ab3add9d32d1785d066fd9eab9b248cbb33969d9f8fbac2c600050e4c5931f247e5acbbf20bb8e30e01513ecae4033f060b07a314b078e8e7c

  • SSDEEP

    24576:3AHnh+eWsN3skA4RV1Hom2KXMmHa9ZLa5KmMb0e3F+X5:qh+ZkldoPK8Ya9ZLatMb0e3w

  Score

  10^/10

  formbookwh6adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2