Extracted

• • Target

    SKMBT_28324122512260.pdf.exe

  • Size

    1.3MB

  • MD5

    00c66ed3dd9c5c71ff67ab6a4e3656e9

  • SHA1

    a9522924477ac1c8c70e66a1ed007c23fb7e3028

  • SHA256

    256de281ea46412e8c0743811da3d3075fb2ea1891125c1b055d5c0c01d1045f

  • SHA512

    0cbb2fea2e8c485c80b522f4bcda11cd93e390d7237331c99334bccca5e7beeb90edfdd0122a20fb164a43a5aeb329e4a0d74b0bb979cc859fb23e58061dd391

  • SSDEEP

    24576:ktb20pkaCqT5TBWgNQ7a++wVXSsJAzFfaeiwKyod/Qsb6A:NVg5tQ7a++wpSYgMei5yi/H5

  Score

  10^/10

  formbooks94pdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2