Extracted

• • Target

    Advance Payment Receipt_pdf.exe

  • Size

    1.1MB

  • MD5

    2ba59102c4f4f5316e5946ccd11f9631

  • SHA1

    9809a8ac154c800724854c8918473f780a34f39f

  • SHA256

    8485bf03cc8dcae3bbd2a1a7abfb54a91a6590e8f4da85c834c58c9debd4c07c

  • SHA512

    d1c50d04c0f08e0caa53a755946b2dc2dec04f6d42dc2d2dda359f5a0c289d541eccc521bcc76b8e1cd9e03e1d043a5a7b711acc5ba85b1e6fe44d1cb1da59b5

  • SSDEEP

    24576:SqDEvCTbMWu7rQYlBQcBiT6rprG8a/c5B135ZPF:STvC/MTQYxsWR7a/sj35Z

  Score

  10^/10

  formbookbi05discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2