Extracted

• • Target

    eInvoice_pdf.exe

  • Size

    967KB

  • MD5

    e955881d67ecd58d8db5801affc722b8

  • SHA1

    ace624e52f276d27462547b7feef07cc0b585ce9

  • SHA256

    91de74dad55c2b232479de6bb60f68a3c3a260aad21bfb00a10c1e53d25f934a

  • SHA512

    1d0544610f4e005eabf4baadeeb47715c3b0e79e731e8f2571f31fcaa9024b8b32cc39e980b6dabbb0ffc857829761869414abda0564112fdc43192aedf23176

  • SSDEEP

    24576:1Fxy9RppEHJOMzsWt2Hkpz6T9ZkT0tmMCU+hl3yd+L74mBfNUstzo:1vGEH0MwWt2k6TPkT0tVP+D3

  Score

  10^/10

  formbookdocvratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2