Extracted

• • Target

    RFQ232110.exe

  • Size

    665KB

  • MD5

    d57281188377857e91520a46ad75a1d8

  • SHA1

    2b99fd634fde701062cb163bfdc5c410a872e50f

  • SHA256

    e1902171c2bba8b0280e747ec2457209c1b32bf899d85f241c2993fdcba1ac31

  • SHA512

    89f5424a818efd91c13acb7f38c3a9b0d1959abada6e5aba96dec591b1ce275cac26b00a94371f7fe90d1f250b9370ac089c0253392eda96fa9e11d032868719

  • SSDEEP

    12288:mLNhkYRig7eFSYOErtXYHaVely7tpdV84KkRfAovmE:SHag7WnvhDT7L84Kb5E

  Score

  10^/10

  formbookcu29discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2