Extracted

• • Target
    Quotation.exe
  • Size 501KB
  • SHA256 f89ea3eb5f2720e6194642d92ef8de19d90dcb0cf12c64bc42dd9aba0edfeb85
  • MD5 28b16a7e4ee7f2b7035273f0f47d6030
  • SHA1 9ad18f3f9170ae0207d232135efdac5f3c89dba5
  • SHA512 08e6539a74a87697b1e472d3a95a629e9c664763bba06d10ec1b49d170ba69bcc014554cc0a1a8196f810c0aacb68764fa70ad5148533a0a84e15058e584cedc
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2