Extracted

• • Target

    Quotation #10091.exe

  • Size

    758KB

  • MD5

    d6b81c33449a58e41301d210bc265632

  • SHA1

    46b121a17c3f960430f488bcb4cc1c15307bdd55

  • SHA256

    b481fd78d0f715aaf7d7446c33e2bdf500e52e1c0d58ce5f81efae25ff9a8fd2

  • SHA512

    86bdadb1b65e6f7de574d7851518f52bdfd05c5e84a881115a9a7204693847b95094a6a4cc23a926fdb66433926c7ace6b54cc83e88272a66074712876882a4a

  • SSDEEP

    12288:v6Wq4aaE6KwyF5L0Y2D1PqLTA1S3c0DLFvFjmOd1soYKrdyTnapuTHTNOG002Iil:tthEVaPqLTAV89FNXuKrd6hTzoD02Iil

  Score

  10^/10

  formbookc24tdiscoveryratspywarestealertrojanupx

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2