Extracted

• • Target

    ORDEN DE COMPRA URGENTE pdf hjk.bin

  • Size

    577KB

  • MD5

    a66ac03d7eba955eb333287291e4a24f

  • SHA1

    0eb687b7d0fd4d282caebbeae42bf744df7907ae

  • SHA256

    6bf2f4d58a837d790e914f36b0056e955c35ea5571d5a758b0e0f052e8b4294f

  • SHA512

    c076903a48d9965d7fc97cbc8606f4fd50c9eb7477794991efc519393d720f4d54765d22b0e366e0efbcbbe68b3fe915e8f43847f263683b64af902dc4bba525

  • SSDEEP

    12288:oXwQXxqmIL0WCuZvtjIsIlxQPtVEZ9nYc5Gy7RjallylSx1o:obBq0TuZvysIlejU99oy7Rjm

  Score

  10^/10

  formbookde08discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2