General
- Target 27072026_0137_26072026_RFQ FOR PURCHASE OF PRODUCTS.PDF.TXT
- Size 826KB
- Sample260727-b13vysfp9t
- SHA256 9af63b070d11312cd437d088862a8106f3b65cbe01dd2712d104096058e3482b
Score
10/10
Malware Config
Targets
-
- Target QUOTE.exe
- Size 1.0MB
- SHA256 d1385115e76ee9953b959bfb963aaee1a77a2862842b6995dc057fef332bac10
Score10/10-
Family: Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Suspicious use of SetThreadContext