Extracted

• • Target
    IRQ2107799_pdf.exe
  • Size 318KB
  • SHA256 da4cb25d25388cef409303e2e4c3f2ec589d747d49e602ef924eaefbbaf75144
  • MD5 ce5b47c242fa046f7d71c09b10b2b8aa
  • SHA1 0e6b489ef00b9611692ef071bfe5e8f71138009d
  • SHA512 e0a85e29831befe7cf7ed6d6bc66c32d95d4accd9578775e9adc05a6509796fe89133858b2b21e1864f298b5db4e674c9df5b13925080b63d50e312cfef56e77
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooke0l9ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2