Extracted

• • Target
    IRQ2107799_pdf.exe
  • Size 462KB
  • SHA256 75a17cb26bd616c7d7b48b0b3add3033b6cd8656d8d20a0618734a3850072632
  • MD5 540da0c640631bc2f27f162a7c5974d5
  • SHA1 1d29e94ff13b16661ea78d4f0259cae6d8cfd1cf
  • SHA512 d1e194732b31bb1e8bddbe3256a8f34841bcd017ef1f1efc707d46b46cf1c5c78acadc719023a639c29d1ff7aba0d02afd20a71940ed2d9ef6c5b30008fea5b5
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooks1m4ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2