Extracted

• • Target

    BASF PETRONAS Chemicals - RFQ.exe

  • Size

    1.0MB

  • MD5

    fd400f9fdd400093e67d0692b24eca96

  • SHA1

    ef09de86c8868d634924edd815f83211a8760964

  • SHA256

    367c5877d8f75cdc6d3f42c0f5a43f37d5faa47f74ab9be2a5f508a678de65fd

  • SHA512

    37f29e4c5ccc0f59d6d0a6cbdf6be50a400946b428bc4886c6eb6be041edd14b6ed9da2e8c85addc8ec93113db7929cd4855275194d84f52e513fddf6b821f18

  • SSDEEP

    24576:gAHnh+eWsN3skA4RV1Hom2KXMmHaAQVZBUQ0Wjz5:Xh+ZkldoPK8YaAQVzUQP

  Score

  10^/10

  formbookwh6adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2