Extracted

• • Target

    Original Inv_pdf.exe

  • Size

    614KB

  • MD5

    bd6899dcb7b367f8147f25c627750ec8

  • SHA1

    bacbd00d9d8fd2925bc65e8b81b1dd56132fdc38

  • SHA256

    7bea86a0a8eca333aadea84ecc083271d6a1b66fc226eb2000df79f69a5df4ce

  • SHA512

    8630554e65283d6499ce4350e02bab47c22dcb7a01075439f3364b40a95723e4c9151e269ba558e58ad8c4b798d3b9254b2c75887809bd9cd9f85eef8df8cc5c

  • SSDEEP

    12288:2uVCtZ6iSjzSebw1UjisRhzY2SzIvaWcoD0fiVfQ4XkRv+EN1d:2ESkhjhRhzY2SsvaWc7iVfQ4URv+a

  Score

  10^/10

  formbookb31adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2