Extracted

• • Target

    New Order_pdf.exe

  • Size

    1.2MB

  • MD5

    5bda6ed02bf9ee30fcee815cd3e600c0

  • SHA1

    82644c7ccc6c3366603c812c7c86b44d827f2408

  • SHA256

    1f7acc55a13b6884c4cba7686c7f28cc5bdbbd9fd32947335044db368d2dea2d

  • SHA512

    38cc0b9e2f5263bb5f28e0ec708a6042f324fcd18b211e674e83ae59acc7cceec142c2a95efd2f328fb1fde5dcdd65a213e1ee76e7bd9552bfce079056ffe11f

  • SSDEEP

    24576:yqDEvCTbMWu7rQYlBQcBiT6rprG8aX4Z+EsFAWNmU/s:yTvC/MTQYxsWR7aX4Z4FAWNmU

  Score

  10^/10

  formbookph01discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2