Extracted

• • Target
    PO23043-WT0540500856808075.PDF.exe
  • Size 555KB
  • SHA256 3657bbc56c6f5a8bc8326ee2eb13f384bd89697fa29175436a28601b47f945ce
  • MD5 dc1530c419c1deb08f341a5921b361e4
  • SHA1 fcb91bdcbf638e27b9b7b47c0e8e766b8ec398ed
  • SHA512 cbcdcde42619199cb0789cf2dd48c597f22960cb8e3ad30d20443c5c0f9fc3a5dd4736896290fab24bf72f4ee3b7e13811e81b9e1b7505c0574e43b9a4cca55c
  • SSDEEP 12288:vl2d04ufPnTWNpbRzAgbj0YH5xYazlEyW4H5TP2WrcFmkXzXe:od+fPnep1Agbj0Uoom45qEcNXzu
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksy22ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2