Extracted

• • Target
    MV.KMTC JEBEL ALI_pdf.exe
  • Size 432KB
  • SHA256 e919d1c10bd867f71a99a7aaa5c52221c4e79341c2389880596a8d1ef9ed5a13
  • MD5 49bc83ebc577db11d1ba4bfde933bf15
  • SHA1 e861b6986a70aa20a80502ecbef05b8258a86876
  • SHA512 942d78029d8179f6fd93235288c62e35e3db0349ade803ba32bc61324a5844bacaccd467cd6932533556701de9ba2dfdf344be59d8db3f6d2b4265904f87fa42
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Modifies service

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2