Extracted

• • Target

    QUALITY SCALES CONTROL PO , PDF.exe

  • Size

    512KB

  • MD5

    599a2f1f7ae79d79e8811886a74db3a0

  • SHA1

    c22dfc6ef39b158b403e9e2fa035847af9f6d524

  • SHA256

    e1bd2c6c40bb7f29fc0f7d164f0d8061ec4cd33edac6db75c0810b10b19aeb3e

  • SHA512

    3e580af9d144d36d850062ac466cf0930905708a032f865389d22ee672fba8d459d022255c6b8dcae3b75bd83fd739524b004c2144436c16c11c949511804abf

  • SSDEEP

    12288:A6onlduxjoHbCaFLq/l4WCJHMBJvGdhL:6nruxseOWCJsLv

  Score

  10^/10

  formbookewwsdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2