Extracted

• • Target

    New Inquiry INQ24561.exe

  • Size

    627KB

  • MD5

    fecd01ee01331facdf5162cbe8704e44

  • SHA1

    57079ebff93d3450b96b40e2c22e080c4a061098

  • SHA256

    248ffbd7ceb70f0a8fc98a93dfde21283489b926a757cc499191d2f43931a093

  • SHA512

    1d3a7a166e612a21e6ba51c178b91afbc761948a1561a1dc4cc6d5240cfa9ab666982119743c1d0010fb35e0aa49cdadb85f41cbfa1c02836d9746edd9406637

  • SSDEEP

    12288:4TPZbEeX/xlC4MehHVKLmt7rKWgPUfrXwJZ+2swW5snDnd9tG4/w:4TPh//xM4Nhimt7BgPSrgJzswtd9tG4

  Score

  10^/10

  formbookmd49discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2