Extracted

• • Target

    E-dekont.pdf.exe

  • Size

    266KB

  • MD5

    fbbdef7b1be694b9913a9e6e91681847

  • SHA1

    e81a9326b40b5d23b249ce018f3038172eeea087

  • SHA256

    eea29ccf59fa6a6aa5a3c14360db6068144f14601d987ec37ea21a35cdac9430

  • SHA512

    53613b4b7be5db5f0ae1d8ae744a46cbd2ae87838bae9f39381a2a120abfdcd0ebafad41859d5808a1cb786befd35c1af27a6f3e6308187c8841ffd408d9fded

  • SSDEEP

    6144:vYa6rCjol7mXbdsH7sXM5CErVGf0xWdEkw5U+mWINbles4lmA1C0Vl3qIhOP:vYB3lKdsH7Xj+vhF5N4R1PnW

  Score

  10^/10

  formbookme29ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2