Extracted

• • Target

    Payment_Advice.pdf.exe

  • Size

    781KB

  • MD5

    51fb23afdf9e914a019a90eeac6fce04

  • SHA1

    4b5a5484818e77ed3cb73f571f31f8af8290c0ff

  • SHA256

    ec8ebd88bfd121c0dd662128bc14f8e4f2e4cb4608f4b71abadd7e970542a6ff

  • SHA512

    5bc8511ae2fc19c470c4c8152fd3f9df09cca6e8e3f1e254f82e89a4029009344ee4a36de0515286d8559cf3588aa8501405b9d7397f8dc63b76863c6192492d

  • SSDEEP

    12288:LAb2iN+VC/VPlzGX6HZTg42Rve+zG97WZo:+18C/F9GK5k42RvPzG9aZ

  Score

  10^/10

  formbooke5tjratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2