Extracted

• • Target
    Product Order pdf pdf pdf pdf.scr
  • Size 88KB
  • SHA256 c2fad0ca69171eabf05cff3020af18e45b34558b660e5197bdb4c0c072c9cdde
  • MD5 386e7e7739d1519fa7e51c6acd53c485
  • SHA1 6ab8bf7b1fea5415146d98a047e67a0e4b5da62b
  • SHA512 c6aeb66db8850f8b1e51d1cd0962b0b52e772c9090bb52bd83c1dc6ad9df8f3a85b7b1b46a2b46932e3d73e5c68739c7d004acfe6923b387494cc742a1f0faf5
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbookpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2