Extracted

• • Target
    RFQ # 1014397402856.pdf.exe
  • Size 689KB
  • SHA256 2ceaf0bcc42eb42fd5f0762a630d78d965c6d4188016f32429f2eb86330da7dc
  • MD5 00c19cdfb4c0dd846227e8eae3b3931e
  • SHA1 5f0c6d3dd08e52371982062c7dffc935557ffcba
  • SHA512 9c06ec7fbfe47d2992ddea120aa52a6dfadf2d9ed64ac2b64d424b6f3af2140c9458e02847cc318fff3cd0a151b2aef88eb2969828909c0a45aaa054b13881a0
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2