Extracted

• • Target

    quotation inqury.bin

  • Size

    629KB

  • MD5

    fd9b04760439ae4dbe36397690b42380

  • SHA1

    5dc6d63ef88a09d219444a902b99100c2b0e26be

  • SHA256

    15e41f9b684c8df81ae0c2d5d68a036cdf20593fd72d0c7200c2da474a813f30

  • SHA512

    c0aec2a570b5c80da005c113a7e9762bbbfec177ff1473648375c4425e46ded5cb66aff20f2b14f14f84957602add948adc5e9f28027a73704aa8dad1cb76807

  • SSDEEP

    6144:TOnJca2zaKjDtzIiYWOcMQF1Nej+zXtUw3YFlv/Dk9C+rYW:TqiqKjFBHXNeiT2nqt

  Score

  10^/10

  formbookrwodiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2