Extracted

• • Target
    issu2022151100031pdf.exe
  • Size 303KB
  • SHA256 5f12d75282af46d76785401c4e69c2f2cf3bc35281d337ce541ddc0e0f6f1725
  • MD5 040b73a72e9b50e751be61d5d22794d1
  • SHA1 e70f4c8af8ff5a53748b0c163566b1341a1f8095
  • SHA512 0e2b0d6d9792954be34994e1f3929f086f4b73c02c333c6888e844e78027ffc576ade4294aa1eee36ffbabc920b13da0d0caa44b4a1fdf815aef273a9286ac18
  • SSDEEP 6144:MEa0NLLmU3y5hjlwa8eIVMec55y8RsjzZ5gc9fjdZypewkW1lo:XL1SR8eaMecDs/gc9fjvCtkW1lo
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookmi08ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2