Extracted

• • Target

    QUOTE QUG24-200370054200518.exe

  • Size

    1.1MB

  • MD5

    624524a11876131a018ef46266abb555

  • SHA1

    1abdebb3babdbb85b62966c70f3d4c340c640e81

  • SHA256

    3d1cf93ee455b1bc9b763591e1be54ec17e4a8cb814a8be59270e72727f11c53

  • SHA512

    a194e9cce840451e881ef483906fa93df9f54f41f189f220e3332fde27f76c76b280ad31a99eccacaf990c5abf0937aaf85af87dcc9c3dab1f7b7ec45fd3b2fa

  • SSDEEP

    12288:JLkcoxg7v3qnC11ErwIhh0F4qwUgUny5QNJLlZ6TZLCLQY7tJailcTqhZU5xCWJ4:NfmMv6Ckr7Mny5QNJ6ALQYSiluzVG

  Score

  10^/10

  formbooke62sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2