Extracted

• • Target

    RFQ PC25-1301 Product Specifications_PDF.exe

  • Size

    1.4MB

  • MD5

    47b4b12ff498d2620dd824b86ba20e98

  • SHA1

    c563ff933dd402ed4734c5f2030bf0bc8afd46c6

  • SHA256

    4af879a5ba55d1f85555bef2423b273f87df5db31d540934572ab4439e062545

  • SHA512

    e19bf614de75c3b858726422817344a1ebc920b6daa9a8daec9fbef43e47a1ea218999473ab0ff53beead5a093e29a277d04a8cf2f811d38ad9b966d77212dce

  • SSDEEP

    24576:eqDEvCTbMWu7rQYlBQcBiT6rprG8a74mPIiJZ+6/x7me8bQVe:eTvC/MTQYxsWR7a72mM6J7mp8

  Score

  10^/10

  formbookhwu6discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Suspicious use of SetThreadContext

  behavioral1behavioral2