Extracted

• • Target
    Purchase Order _pdf.exe
  • Size 875KB
  • SHA256 2dce266f65b63c927ddf95e71bb0d226eb1c8b260ba8a6965ba1352e9fa837af
  • MD5 32d902404889e352b0ee10182c737a69
  • SHA1 b2726a921dcc1837e897944c6ce2492084e764f0
  • SHA512 8bc25083e64541932b4e5d5411604e8b19b80b668ceafe1fc641853be748450a71a7a11dbba81571651ca8a32caa5b9ba5c57a2a92165e8fe9d34a31874e68c7
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookransomwareratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Enumerates physical storage devices

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

    ransomware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2