Extracted

• • Target
    Payment Notice_pdf.exe
  • Size 967KB
  • SHA256 bb9b28b17b4e52bc320af0b1a70445a60c859f2205fa243516545e4f6cd0990b
  • MD5 7ba779a892c46cc26e45bc4c53241a70
  • SHA1 6db1d5b7822f02fb533c93c1d3f0d8e408c835f4
  • SHA512 9e478b7ba02c3834ff2be5776f38491bf559435986544f21c6b6794567c3ab80c798ecd038be37a2baf5acce8503ceb7809dda1e8f983eb4cb94081494f16f68
  • SSDEEP 12288:Ip2iNiETzZKNYTW0Dro9znvZlqhSYMJJlE5328JJYGD4FjwJszywOE4iPlnW+n3:Ip1kh0H8zKSR4PzYGDkjwJsoGlWw3
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksz17ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2