Extracted

• • Target

    DPPLYAD_12872 PDF.exe

  • Size

    717KB

  • MD5

    f2580b66b44f9b6b801cf2204cfbf15a

  • SHA1

    a3c6185732dcfed0bf086b8ead7e5783c4625570

  • SHA256

    cc1b719f0ae40d0b53765aae8480474dbc7277428f56184d2dc94a0de5fbbf67

  • SHA512

    ffe68097dec7249933c7676f773ce6712bdbcd5e02e2619f933d6fc1e603d529ae82b8d35311e70abc3ca88e4b5012153165c4917ac65c93ba63fdee61af27eb

  • SSDEEP

    12288:bVVkSZbxd8O+rqknN5kOnH2ajJUNDQZJ69HsXHTALxbotLrNIm/:fkCHyFN5fH2alQDugMXAxU

  Score

  10^/10

  formbookhe2adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2