Extracted

• • Target

    Payment_Advice.pdf.exe

  • Size

    780KB

  • MD5

    86855fd89cf9d73b25db56cfddcb26bb

  • SHA1

    c176adca26aefc687a5a89108b0276e0f8dfd22c

  • SHA256

    6f74e80cc1e0428e9c04ade080df738cd9206a4ef51e55737af9c5b5d62ca7f4

  • SHA512

    8b378e20dd307bc345ac2f800c62e9c2ac3235f782ef2fd5d8fe9b550ef82dc76182d6cb25bb592d918161da9bc5bbfd220c256848c993dcc2634721b6a12ce7

  • SSDEEP

    12288:wA52iNUDjyTOhNWcAsmP55Fgf/JUni6a7n/W+ZHkOYLD:j1CfOsmP55mJOFa7//ZE5L

  Score

  10^/10

  formbooknquydiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2