Extracted

• • Target

    PTT056739937pdf.exe

  • Size

    214KB

  • MD5

    52c97485bc35094afb64c8f8bb3945f5

  • SHA1

    7c177d8b33562f5e9c0aadd688b4f9a9e891ed28

  • SHA256

    1762c6b2de63b5d6470fdba19845c0110b60342cccbf2df75ba250c5b730d1ad

  • SHA512

    06a632d6632c51177d31f9c9b5e5beb186abdef61c20b820a67817edb51a30d029e93f86528f94415d2ae77184661f6c2a96af73496a256cdaf76a6a3c7a07c7

  • SSDEEP

    6144:qweEpUjGehdR82Jp83HR4TR66swZIpaDU05thwd7jE0mqYu0pk:bUjTPGvm9cxyrwd7uu0i

  Score

  10^/10

  formbookmr06discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    voqhrhox.exe

  • Size

    7KB

  • MD5

    9a89e0a0537301f23735b1c3ced7c6bf

  • SHA1

    ee116a9c51813fa158c072a6d41af3b263e53f99

  • SHA256

    cbff760e19d7f26458e9a0c92f4375b1d60f7a8de748d67e63902b9878f513af

  • SHA512

    ed342e26938b6d1707feb89766fb079952801d8ccbe5d6f6981a7d4a9e76f62beca49614cede48ce5959e09cc9f21598802fa7f8023ce03ed21f80621665c93a

  • SSDEEP

    96:B7CxwIty0cSwbVzB7Qf62xrwCZgqjoZxRx2i4VRUn:VCxwIty0cNbVt7B2OzqjoZXUZW

  Score

  10^/10

  formbookmr06discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral3behavioral4