Extracted

• • Target

    PO2024_pdf.exe

  • Size

    1.1MB

  • MD5

    bc980d4328f0dba55926b45ea5599d09

  • SHA1

    d31b2056d30e49a6f655779acf088e96e6d452ab

  • SHA256

    8bd5c8d980c76cd62711f609edde9ffe19b97ab154f7b8e81c563db304be1e52

  • SHA512

    250085c1979997557ae4c39258c34db0ab1ecd8ae248c4ac772b47c708b115aa72f0e234a3f81298d786edb53309f022bb84d68cf6cd678697fa87df9b93bb0b

  • SSDEEP

    24576:rqDEvCTbMWu7rQYlBQcBiT6rprG8a8j5Mq3kwQaI8xN:rTvC/MTQYxsWR7a8jdI8x

  Score

  10^/10

  formbookph01discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2