Extracted

• • Target

    BNK98009878 PDF.exe

  • Size

    720KB

  • MD5

    efbbe02bb03a989cf5670590180ea36d

  • SHA1

    a6faf77035fcb4affa808f3cd127739bf5b7a72b

  • SHA256

    9a2008be914863b763da0fec53a39e995cae4bb95a03aeb634c95ba7a6943522

  • SHA512

    1c61a72ff331680441d92843b8007d4bcfa9813d83c3440fb0d89cb65056ea75a1ecce0de74270dfb05d7585a35387d554f7fc4be60183c830c3b68403149db5

  • SSDEEP

    12288:UDkoCUhRcOJ5chu6FgsR/PbVv9ITy9J8rEMC092pn6AvKmd1Ibo:Ok5ykFpD0Ty9u4w92pnfvKk1uo

  Score

  10^/10

  formbookhe2aratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2