Extracted

• • Target
    Purchase Order_pdf.exe
  • Size 422KB
  • SHA256 145b44152f734c4d61c91aeee89d4ca15f7219a94c4879bfc46b628b6b9dbf7b
  • MD5 4f1e80d0fd558f58a4eb26b22128ed5b
  • SHA1 0c220047cbfb6b24eeb22c1138c91c55f38cb59c
  • SHA512 32784a71f5e006407609d3b736d13fde15d43ed2502945e072d34ec7d70231de4e79b05488cb2ba2ce19b83b7e0197297992c20d8e8ac9e2e109304dae5d6d5a
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooke0l9ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2