Extracted

• • Target

    Quotation #10091.exe

  • Size

    744KB

  • MD5

    1f3a6997ed55ef6be6beccfc1996e011

  • SHA1

    e79c2dde745697bace3bc0efceb136b4796b61a0

  • SHA256

    36421bdf90ea83d4e677a54710f4d35e2bc15a1222c4abb17e78996029f53c97

  • SHA512

    75a895a1e52929af7c3799ac4a609989246659c2e3cf9dc076bc873d089dbd47219eeb8ba4fdcb82c8fe5d1215dbd0f59eab69b43afe782e8268b140a5cdcb18

  • SSDEEP

    12288:v6Wq4aaE6KwyF5L0Y2D1PqLRMiO8RxrhwK9kNr2rReqSHmZBGtA/q80okL3Rf:tthEVaPqLRlO8VCx2NeqlTOt

  Score

  10^/10

  formbookc89pdiscoveryratspywarestealertrojanupx

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2