General
- Target RFQ25101.exe
- Size 692KB
- Sample251114-cqbjdstles
- SHA256 a261dd696014b1ee8348bef04980efda5d762a6563a08c0256d5f09fec1a8cd7
- MD5 0384a7d1cd538445271c4940818a7b7e
- SHA1 3e73abb05b65b135b104fdfd8a3e3112b214d863
- SHA512 478dd0c3ef0ab881ed23edc9433204210a6f1ad06a80169b01b8db6906e9282dbcf63436df87fe2b73e86e1139ec122e1707d02b76921bf1f7b30241c02b23b1
- SSDEEP 12288:xOv5jKhsfoPA+yeVKUCUxP4C902bdRtJJPiwce+x48ZMJAgFRa/v092azLP:xq5TfcdHj4fmbVMFMdFRB92azr
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
RFQ25101.exe
Resource
win10v2004-20251016-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target RFQ25101.exe
- Size 692KB
- SHA256 a261dd696014b1ee8348bef04980efda5d762a6563a08c0256d5f09fec1a8cd7
- MD5 0384a7d1cd538445271c4940818a7b7e
- SHA1 3e73abb05b65b135b104fdfd8a3e3112b214d863
- SHA512 478dd0c3ef0ab881ed23edc9433204210a6f1ad06a80169b01b8db6906e9282dbcf63436df87fe2b73e86e1139ec122e1707d02b76921bf1f7b30241c02b23b1
- SSDEEP 12288:xOv5jKhsfoPA+yeVKUCUxP4C902bdRtJJPiwce+x48ZMJAgFRa/v092azLP:xq5TfcdHj4fmbVMFMdFRB92azr
- MD5 SHA1 SHA512 SSDEEP
-
Formbook family
-
Formbook payload
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext