Extracted

• • Target

    RFQ QUG24-20037005420051820.exe

  • Size

    1.0MB

  • MD5

    524d2e22f0545ea6235f7bff426100f7

  • SHA1

    11f6b999c31e8096212390c8d19dcee5ee0baf8f

  • SHA256

    60e330b0b9a0c646e12263ca295c87025fb54b06487fd5320cc725f921f1a635

  • SHA512

    a2e5fdf606fdf0a05d3855631411cec2cc28d0007f9103862dc7cdb18ac5b6afad7794df6e6cfe306bf90a550a426152da47b9bf76c1952fba008b90e7f1e639

  • SSDEEP

    24576:ffmMv6Ckr7Mny5QL5kaQGlC/U2xAmI4pKrm:f3v+7/5QL5kqCc2xdurm

  Score

  10^/10

  formbooke62sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2