Extracted

• • Target

    quote 030214839A - Toron Alim.exe

  • Size

    796KB

  • MD5

    e658e3a0841f083d076fedf746bffbdc

  • SHA1

    22be6e1fa8fcdf17d3118cd166848f06d5d9395e

  • SHA256

    a5c97f8e1ff612fbfcc18f1a1852db11099e58bb241f5b825c74715c60dd0fef

  • SHA512

    50c91e4d66d11e42682c7a0deeaf09615214cbf8a1909699e22dc4792450c1784fe11b365ffcdad0aa2cd2df710d3f3cccd895d31fc5b11cd9dcce19d168caa0

  • SSDEEP

    24576:zS+QBrVbCx3YNAQzH4U3d3kW3nuXdhRHBsF5PFDsflt76:qBlCyAQzYAd/sBsF5dD26

  Score

  10^/10

  formbookcu29discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2