Extracted

• • Target

    MCS-DECEMBER ORDER-PROJECT PDF.exe

  • Size

    1022KB

  • MD5

    4eadf0e3ae844d2373c7fd8e101dfc57

  • SHA1

    637e2495fa2d0e3664e0d10f3440572a5cea61f6

  • SHA256

    f93b6e5f1a11efa6dbf05ab7b4bfa26247bfcc7b467aba7de2fab6267de11623

  • SHA512

    6c2241ef9a45e0a7aaf043075898ce1bd331b9b41dd09211c56c0de9729e4919de76d62326363fb948a931bb72a96e97d83459eeb5cfbf859b59f1f6753bd128

  • SSDEEP

    24576:P5/KwaPGlttTfekpsPBQSBFpSiLl8scS6R:PJOGzJffpuBByiLuso

  Score

  10^/10

  formbook54utratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2