Extracted

• • Target
    PO NO. 22P6200457_pdf.exe
  • Size 401KB
  • SHA256 844c895254d53e80e0e0f00a2c8e1e212db8ac218ca8f5b8a9b6c20e346e280a
  • MD5 8dfc3c636d040c87dccac60d81d89d9b
  • SHA1 186f4591462662abca9f9c581a3d222ef1c9b822
  • SHA512 aede071ac980336302eba51db0fd5f69a7b25346ec226710950cf2723b1c328b6c867de6e2249b38035e5cdbc4a0e28979ae1b1d7c5ce6884416d719c3a7532c
  • SSDEEP 6144:gkv+VN01z9G7kG7y0gUVgvFLa0iPCdWlyJXt/aybv8bKihMc:p+VN01z9G76UIb69Yxt/ayoGEMc
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooks3s3ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2