Extracted

• • Target

    ETA BL PRO987659 FEDHL8998pdf.exe

  • Size

    1.0MB

  • MD5

    36a044e6dd5a64160bed8d90f8cca6d3

  • SHA1

    144e1408da99b2776249ecdb2bcf0bc259a2695c

  • SHA256

    3a59a45b9ea6320db9a64910e02ea9d69419977c6dd5841752bae3b4fbbb661c

  • SHA512

    256b902c0a8770ca51ecc4272e2c063c0d3131ee96c328411bd81851eeeef80126c09cc5e6abd3344b57d486bbb8ff2c2a6cce65d8696e41503e4fcf85e1a994

  • SSDEEP

    24576:0Cdxte/80jYLT3U1jfsWaHQ7GKmkCuUHQ:lw80cTsjkWaHQ7VrCuN

  Score

  10^/10

  formbookbn02discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2