Extracted

• • Target

    Quotation_2353882378.pdf.exe

  • Size

    891KB

  • MD5

    e13096d3bdcbb8a331d0cfd2114998ff

  • SHA1

    5c19600fbd7c9dd4693e0c408803fe2bf50f04a9

  • SHA256

    7ae4fad494657ec1621fcfe3005d577a4d8ca04847ca48eb466e4649f00faad3

  • SHA512

    5d259ed4e4b6bf2827b668649a748dd5705debc35041feae245962f2f4dc5253aedd4aabec19baf5821edcb802f8b1f2b4816267e3627ce51fdb5bc070570e43

  • SSDEEP

    24576:MGb3AdbcDnunGjCVvUFKEg+blsIYZxsn/amHgyUNC:vmWnD8UFKE/OIxgyUN

  Score

  10^/10

  formbookkzswdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • CustAttr .NET packer

    Detects CustAttr .NET packer in memory.

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2