Extracted

• • Target
    SWIFT_BJ23004300IU2398385.pdf.exe
  • Size 426KB
  • SHA256 fff1dacdf63f9d7d618c930f304a119d24fd3592eab317e988b208ad8819517f
  • MD5 32da6e72c3efd2d3242c8e49ba196303
  • SHA1 921978e022ace201a67e3bd29ce5efda33f3c391
  • SHA512 5a27b0eb40f2681eb26c781433c36ce50d81dce1fe8c549944aa49985b01bf5a637f503bfd02936e0991525882a03a36b5f238aa5758477cae62f5d8c2705687
  • SSDEEP 12288:zfLCxmUNqIg3XFhiR44O7lEJLbGQCVjxdrCcn:zfLC8U0IsF14O7+ZGJd2cn
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksy22ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2