Extracted

• • Target
    UrgentNewOrder_pdf.exe
  • Size 222KB
  • SHA256 966de298a417004b81550a9b3ac5cebe87baa97fcb91c985f005258025fc1497
  • MD5 a1cf8897532910dfeebd66c57b0fc988
  • SHA1 e0ef17f2a95558d9553318d5fea41c4c56ebb76f
  • SHA512 3161e7553a861f9eda48c8b520ca5440420a90c9112f765ceea0259a8aa9a1584bfd48eb521ce88758061c868427a63bd90cc08874c331d196a0f773aad135ce
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2