Extracted

• • Target
    BANK SLIPS-pdf.exe
  • Size 655KB
  • SHA256 1d26a5cf8e279ddaa3ad924224219b550f7d431e8d6adbcb7bd36c01d4eae2d9
  • MD5 ad5d0ee9895fba1a57c2042db6997143
  • SHA1 77cf2383795bc2738a266def491770121493f439
  • SHA512 51ea1c723cbf616053b2f6a47ff55296e66d9e6f2c1b986a07ef99769c123ed2babe402aa5a68908154ec06922774bd018ac66a9b0d2a1e661e47f5202caf77d
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojanpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2