Extracted

• • Target

    SWIFT Remittance pdf.exe

  • Size

    296KB

  • MD5

    1b63894113d19896d98e2d4b3a876da0

  • SHA1

    0f7cbcb033ef92fc1a8d49a97830eb7d4051c5a1

  • SHA256

    bbcaa127862b5b70b5a833b3136f431c03a9165dd0a4646ba78922ebcc7ebdc3

  • SHA512

    bbe1be35468a6c3338736930e920589e5639c56b4924859090531c81132fcea76caa56a3586211bf5e9ff17fcf83434f603f07c4286c885f4bd86a84b6668551

  • SSDEEP

    6144:pXFKo5lbxiFGiivJFTk+9IcRrekVn776yGhQMOfpk+6Nhopb:pXRb40FLTk+9L/pxwM76Nupb

  Score

  10^/10

  formbooksn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2