Extracted

• • Target

    Shipping.Document.Confirmation.pdf.exe

  • Size

    994KB

  • MD5

    e8284ea2fdaeffa5d38de54c156eed6e

  • SHA1

    b2895f73f0fd55a47c8b0bfffd2c1280eb44436c

  • SHA256

    c6d4469628973b42861dfd82d5bdb14d03cfe0ded1511db6a04964f72404b521

  • SHA512

    78ffa8c266ef1d4a4dfa0d39ce6e1a4ce5489c192955d75c4e13078e0c45e04488d7781a49383feb521d5d8769a753813f7c55df4f6a8ee41c6de00ed94fbcc7

  • SSDEEP

    12288:23VwqBIDMq/aZNJAcwUcr+ny9ebjh8aDI+iL2OPpK:m/qENJA1r+yEZ8f+iiOPA

  Score

  10^/10

  formbookoe47ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2