Extracted

• • Target

    SKM_TR0020102023 pdf.exe

  • Size

    545KB

  • MD5

    c03304f61e279fd0608c9f45e978ba9a

  • SHA1

    0e25baf5f637cb53d811c28d0f110d1ed6e692f1

  • SHA256

    08bd19ee270606f776e998984c478e35eb93b7a8eade7c4d945d2869ece51ed9

  • SHA512

    c9ce7463c91ce23a70d27e2f8639d2343652234a430108d8360ff1c0190aa8b044e8d0f21f9c75bf025d13473943bc0f88e6647ae79711c5a7da61d8c4559af8

  • SSDEEP

    12288:38oUQsNpeR1lxn2BnlaJQyMpUEviTNcIkHd:s/QIpeR/pscJEviJI

  Score

  10^/10

  formbookg11yratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2