Extracted

• • Target

    order pdf.exe

  • Size

    1.5MB

  • MD5

    dc425cdd4be9e881dc82e3d75c2f7771

  • SHA1

    c1d47f92be936cbefb52899091ca2273869101bb

  • SHA256

    c04e2a4dfc825504cc3b9b8917cc76d60c7d5a9a7a52eb8a191372a727eb5a23

  • SHA512

    19a79889310e1d8ac40cea9dba528656e3e2ddb4d2298fd4ade3dc7df088b32624a6ccb57657b74c4f06eecbd35cf74c9e3110dfdda036ddaf57ff096c51bd97

  • SSDEEP

    24576:yAHnh+eWsN3skA4RV1Hom2KXMmHakWQmuuvmkvpPyfwfqpUxXrSP5:1h+ZkldoPK8YalQmhvhlyfwypUFr2

  Score

  10^/10

  discoveryformbooke2eratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2