Extracted

• • Target

    Proforma Invoice P101092292891 TT slip pdf.rar.exe

  • Size

    460KB

  • MD5

    04fec8ba993e5f1f1b6d1120a2ea9613

  • SHA1

    4787a9f2537452a8ef008ed74f568a346215e4e1

  • SHA256

    9a9d7a41c404b9044a82727996d53222d996f03d71e4839245dbeeaf4c685f77

  • SHA512

    e7dc769a2c1ff1f3458b19a976a15f4513598ad45a91e249973f500fac8ccf1c3071953b9bf63566f3363bd9725611cf1c8334cd74b0f916843f17489eaafe14

  • SSDEEP

    6144:i4zkqkPg9nAWDYkldwjjVAL+g/cSjx5WXGanNhEUnr:i4TJ9np/ldwjRALZ3x5WznNhv

  Score

  10^/10

  formbookobpersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1