Extracted

• • Target

    Receipt PDF.exe

  • Size

    741KB

  • MD5

    f38c37e35f3df4197872a931ec3cfce7

  • SHA1

    425d27cbb36a6b72e84c8a61b9911c7b827d257f

  • SHA256

    9c051c1f0938d57caab88ddf7c68456838889f84907436aa6dbf50b1e35ea6ab

  • SHA512

    292d24a4054c76e68e761b6d4ed1d76d82a3825351fbc5ea35affc95a64b583fd126c05b1de7feda1bfa97cbbeb9493d79e62aa8fbcd5b9a8c5fd8ebf0087508

  • SSDEEP

    12288:XWnI4NT/SiaY60H7IwNNIMFyX3X7B7oBy/NTS6jAl0R0MuC2iN:XWI4NzSiaSMwEMFyHXJtNS6VOMuC1

  Score

  10^/10

  formbookhe2aratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2