Extracted

• • Target

    New order list_pdf.exe

  • Size

    260KB

  • MD5

    9db995a644af18837b503d2d9a33bdec

  • SHA1

    c06cd0c6e3cdfbbe49f85765335ce9eff4500edd

  • SHA256

    dd4311e439da8393afbb51dc192317d6cd5a53b9d574971adb768c38a2bf3d71

  • SHA512

    5c857e420be06475c1ef7ae2294f90b6eac5da0c78bcc15aa0a2284a5ab184711b6a72bfdf06fbfcb5afcebbc105466493373a208a76be8000d76777ad318fa0

  • SSDEEP

    6144:/Ya6LZk8ky9q604SngQ2SLljDavgmtLGdBdMW4Tem7lZfhS:/YJZ726fSgQ2SLcvRtw85lFg

  Score

  10^/10

  formbookhs95ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2