Extracted

• • Target

    Bonifico 2692024pdf.exe

  • Size

    1.1MB

  • MD5

    ab5a5fadd9a58b412281fa7c040c54ef

  • SHA1

    d67c6a5fb65869cbb381c0a8276dea5e30ecfed1

  • SHA256

    e4d1f88b5db146a70bce062886dd60b15d13bda9b325535ef4d3ffcb484981ec

  • SHA512

    fd4144fccc27cab79fa9001e9847a65cc778f01c1d2311babc8982cd30c6ba4f2e85d8059f68b9111cfe103d29172dd40d4aadc6e29cb3db60a07e2af5d321f9

  • SSDEEP

    24576:PAHnh+eWsN3skA4RV1Hom2KXMmHara7ystgXDMSJA1p5:yh+ZkldoPK8Yara7y4S5Wl

  Score

  10^/10

  formbooke23ydiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2