Extracted

• • Target
    ACH PAYMENT 1192022pdf.exe
  • Size 787KB
  • SHA256 2cb0d3b3c2a398a778d18b089cf68d8f7fd91808da695bee0f0fb556354efe09
  • MD5 8ce1b79f89e73e5d31f6e934a2be7821
  • SHA1 fa7a042f3ece8aecd491d4287cf76e0431e4a123
  • SHA512 2a186a4b11c142d731c872dc5a4b6eb30e3b9f2ab5c9709d2a23a9161694f63f455573b09bfd91b1727b9dfd019fd9a174ed71d01d6fd40f9a19c9d5b80ffef7
  • SSDEEP 24576:ebhfCCHEmgHSfhDMKnkUTgZGLvbPKqCRrLA3FC:YhfjEbSZYjUaQvbJQgFC
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookma27ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2