Extracted

• • Target
    Scan_02_06_20_pdf.exe
  • Size 318KB
  • SHA256 5da7735fc8be010eaed89e5776cabe530402d4c6d0c6e5c5de515f12e05081f8
  • MD5 740019072c172c397faf1d9cf47343a9
  • SHA1 0476f4cb003be46d3627fa4b475a71302269682d
  • SHA512 a3f46158b3dab3c30f7b8cdb8f25340d54cc92b4a6ea42075b28f7e26ce9f5cc05d1da70e3cc5f76d654d96b8e21b82c3730664fd2a5efa614b839d0004821a1
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojanpersistence

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2