Extracted

• • Target

    hesaphareketi-01.PDF.exe

  • Size

    739KB

  • MD5

    e9d423ad70831fee10afa1a3a58da8c0

  • SHA1

    305c942109bb57a34791689d76fc2e013cd96d41

  • SHA256

    ea370765d72286adf1310958539f8caed1eeab11b23644b4f0672840e3c937af

  • SHA512

    17a18bd014479bd2c20ed891fb4c719038416e18a1b61e13717b89f739914213893e9b1e36e00e52e6aee420325bfe0f76f01af4496704024bcb069fe99c9315

  • SSDEEP

    12288:9rHkmFx2iqNhujGjUR9HCxnbD0gaJ5oAmk7WKR5njrK8MHJMtrDaOfqx:tEmFxU8Cxnf0gq5OgWKrvzNtrDx

  Score

  10^/10

  formbooka2e2ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2