Extracted

• • Target

    Bonifico 1022024pdf.exe

  • Size

    1.1MB

  • MD5

    18f39b782ff2ccc5577ed1430864f804

  • SHA1

    36ef1ff204f6e51e3596daef3bcd3412c14cbe08

  • SHA256

    6706e7c66c6eecb08ddc9631e077c73f82aafdbe39faa47a3cf82812594bcd8b

  • SHA512

    b1f716d836ed43fa622f078e32239995dac0ad80a67a9668e76d529968f4afaaea6a859960dcc78f267e68d245f0d1210b1cc2a9f08a260362d7f4d481e6d473

  • SSDEEP

    24576:lAHnh+eWsN3skA4RV1Hom2KXMmHaGSbYCVZGWbZ5:Uh+ZkldoPK8YaGSECD7H

  Score

  10^/10

  formbooke23ydiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2