Extracted

• • Target
    quotations pdf.exe
  • Size 612KB
  • SHA256 1ec5aeccf89c5d7a378e443e742e37f05a2aa7cb71150ee0ca4876c6b37d7b4d
  • MD5 b58faebe1453acc289bfd688688e2474
  • SHA1 730b350d9365074bcce398290a8c620c68209290
  • SHA512 bc6c24e85f9cdad6405ed187c689e21461916e85b12822027d1dcc87eeb1403154ba984cfcbc69fe812529f530561cbb9e3376fab7795ce1fc32e8883daa2ff5
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Enumerates physical storage devices

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2