Extracted

• • Target
    Bank Details.pdf.exe
  • Size 649KB
  • SHA256 e1fd783c3c5c3a686b2ae04b64ecce2b3c5e00d2bed04cdbf8f420a57d82208e
  • MD5 70f1ab254a32c6050743605d6f3384d5
  • SHA1 526c5e0280cb55ef308312db603e94af4fee0b42
  • SHA512 120d687da81b7fede4954e181bba535b279e81542ed779af0f41f6fda58596b25d1162a950e2633b45d6c9f0034ba91606873a87dc9530aa5fad1d5c2a5bbe8c
  • SSDEEP 12288:3f7mvgKnFHMF9XuroT07oUdMIEoKrom2Az3HCqC48wypy/LfcfhtYiQGMXJEGYc:zmvL9MDXurIMMIEHvzrC489ybcfvxQGs
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookfs83ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2