Extracted

• • Target
    Original Inv_pdf.gz.exe
  • Size 224KB
  • SHA256 4422661ccc0d1ca90ea0427fbe9eacc398d819ef1f557c163a686fa127444c3a
  • MD5 528dda2fb65f094c420a81707fe5a8a9
  • SHA1 b1ddf9185a39edcf1c24df6b97a5ed89d1d2930e
  • SHA512 51a7f4d4b9ecb1ba4c6eb7a156268663b701df41d16621748d1655b53fad823e894e35b50b2fdb22acdb691fa1538e3718d5ec09ca0d6a1bc2016874aa55b4d0
  • SSDEEP 6144:qEa0isjvuZhvGJ2qbIUn6sofacpfey4EVtm:6zDvGJ/sUGf/WBEVtm
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksy01ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2