Extracted

• • Target

    Quote Order.exe

  • Size

    408KB

  • MD5

    2d180e659ae8180b343e4abddc7f304c

  • SHA1

    7725c303e9ea8e747666436b913c5491b16a8952

  • SHA256

    6fed5f74f0fa613ef25311cfc20d8b38abc5cf4b4c9183e34aa7386882dcf1ee

  • SHA512

    37c38c59e0e629b5d28c930886eea0096530c42d473ef70f5a6aa53801bdb6386e1fe154cd6b0904325a82268dd0372355fb0fa0a401c06c5e725091e087e201

  • SSDEEP

    6144:Lmb3/DGv75a3j51E+S6bjNeksVG9tAA1tIX3NYi/cXZ6TGJy:ZD5aTEb6nzdGA1tIYi/cXZY

  Score

  10^/10

  discoveryformbookna10ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2