Extracted

• • Target

    RE SWIFT DOZNAKA 1 pdf.exe

  • Size

    1.2MB

  • MD5

    96c304685994e3191e40a493f10d80a6

  • SHA1

    c4096ef0e18d73266c7df284e42254674540d96b

  • SHA256

    297022aace9eedb2bff66cc4178d7961265e2b6e592cb65a03e6854a5bcfb02d

  • SHA512

    d466725a34edec20d8f5beb6746c3d9f4a2ea157b1190cf3f3a60e714b2d8fb5c243b2fb6bf98b86ea32032c93bd6d09b438078a60c57be2cf8356a47484a561

  • SSDEEP

    24576:z523xyh3kk9HfhFnDOoLc4KDbm3DVBAB:U383kk/xG

  Score

  10^/10

  formbookcapersistenceratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Adds policy Run key to start application

    persistence

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2