Extracted

• • Target

    MT10386867902-004. pdf.exe

  • Size

    1.1MB

  • MD5

    0bdc1fda2cc607187dc341cc25827e5a

  • SHA1

    7248bf8f4d29a9d3c2e70c1b987b6464713e5f39

  • SHA256

    33b4616c77120e6805e6291a245901aaf59a3ff29ab585684aa9ff4261b88425

  • SHA512

    7b9bc1f282cbafa54a5421d67b96b682510f081ed94d94328453b5fa37f532f3a71d17ac12979bfce55faa2b23b2857745c7b4599f8ffd47a167e6e660240899

  • SSDEEP

    24576:sONzSIoHIbBEAX+b0cM9/+TY0kNUYuy1aCb:sYzSI+IdEBb/MgTY0kNIy1/b

  Score

  10^/10

  formbooktdetratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2