Extracted

• • Target

    November Statement of Account.PDF.exe

  • Size

    339KB

  • MD5

    11af3f8a0cdee232a31e780607313127

  • SHA1

    559b909a727f354a9bd558d55516c255fc42cba3

  • SHA256

    33871b3b4e871618dadc1d16e1746fb3dfbb48af88a0b7ed20d9460c0fac40ea

  • SHA512

    d5498164fb09c3f774056f14674c03ebedb769616fbcf0aa0d663a53672e10e0aade7194effdc76eb2bef315bf687134f3bfbdae5147d900d884634323b077d7

  • SSDEEP

    6144:9kwsWb9o1co70snIJaLfMdUQB4/srymmOTLQiRwE6Qcpwizt7tfxikCtxLJHQBFo:oWbacOIJaAdTaUrymHQiHNSwYFtZfeLD

  Score

  10^/10

  formbook0rftratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2