Extracted

• • Target

    Quotation #10091.exe

  • Size

    758KB

  • MD5

    6e39ee33f6527364cac3cc4bbf276f26

  • SHA1

    a7c12eef84ae778ce5158327d419508eb5b199c8

  • SHA256

    1a52416bc054c0f2a46f2fd215d73d3285334fcdacf02ed449935bd93fb70863

  • SHA512

    d06164091fe866df2626377b2d2589d9da291c73aff55b40db1844e32290c1f5e37b1ba8155ee02a351366df5a8862ce0b2e5b28a9b14b65cd568064cde28a78

  • SSDEEP

    12288:v6Wq4aaE6KwyF5L0Y2D1PqLVRX3OyQsAhJYUVTx6AflSeqz2jqPB88bYVUCYH5g:tthEVaPqL7nvQlhJYATxDYeHjqPB88ZO

  Score

  10^/10

  formbookc89pdiscoveryratspywarestealertrojanupx

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2