Extracted

• • Target
    Order PO #5544 TULIP GROUP LLC , PDF.exe
  • Size 1.1MB
  • SHA256 61b1619f5d3f4708cb0da8b1fc6b148d7e5352516c3e16fae6faffb503fa413b
  • MD5 cc467dce812e76164a7e9810ce68d389
  • SHA1 2465a8f571aa1a3bdd62ad3dfb2bda0965650d9d
  • SHA512 bc6cc7055340ed36fc851ff50cfeb25ebbc7f6abbae6151faf3c1e25c618cc0cf7989d512bce4a634a36f61e4a48f990cd60564fd9dd35f29bc569e53ee0b718
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2