Extracted

• • Target

    Bank Details.pdf.exe

  • Size

    649KB

  • MD5

    70f1ab254a32c6050743605d6f3384d5

  • SHA1

    526c5e0280cb55ef308312db603e94af4fee0b42

  • SHA256

    e1fd783c3c5c3a686b2ae04b64ecce2b3c5e00d2bed04cdbf8f420a57d82208e

  • SHA512

    120d687da81b7fede4954e181bba535b279e81542ed779af0f41f6fda58596b25d1162a950e2633b45d6c9f0034ba91606873a87dc9530aa5fad1d5c2a5bbe8c

  • SSDEEP

    12288:3f7mvgKnFHMF9XuroT07oUdMIEoKrom2Az3HCqC48wypy/LfcfhtYiQGMXJEGYc:zmvL9MDXurIMMIEHvzrC489ybcfvxQGs

  Score

  10^/10

  formbookfs83ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2