Extracted

• • Target

    AGRUBU 0550.06092023.pdf.exe

  • Size

    467KB

  • MD5

    6e108faf5eeb7791325b1059ecbe617b

  • SHA1

    1681e84c42516e88b50f2b7b51555baea1db50d1

  • SHA256

    d612f5bbe5a52c3bfa7bae355fea53d60f252f0bad240bf12af3d31666b5fcf1

  • SHA512

    ae524ca31944958a2fc27c35725c57e8881656b242d5f2dcf964112393f014c9ddea77d5b9b1f386dcd00ed6599324fea9978a3d43935f6c0773544e608606a2

  • SSDEEP

    6144:+Ya6vdMC5muIKMGOZ9pgeOr+Nr+cNo0XUuvNS:+YXpkaCpTN5Uu0

  Score

  10^/10

  formbooksn84ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2