Extracted

• • Target
    ssk.pdf.exe
  • Size 263KB
  • SHA256 94dab2dcd48fb66d3a0836a2711083a5ee738603de0b47fecfed4e23711def16
  • MD5 082b881b9bcb11ca35030eae75d8bd3f
  • SHA1 e35638355d1143788eae2619a3e8f97f66b60ef9
  • SHA512 e0d181f229593937342dd69ad8b4b26b3875fca537f6f0146b5685ee0ae83a5ce25729fec19a2ceeb1ecbd8607b9be55104e4622058e226652ea35fd02e08eef
  • SSDEEP 6144:/Ya6Ll9VcWtSTJB5bLMIBWhaGWgf3w6oBwxma06iseiDwkXE:/YRDyWyJBJHBufWgo6o2QbsAk0
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookme29ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2