Extracted

• • Target
    Payment Advise 4_10_23 pdf.exe
  • Size 305KB
  • SHA256 795998e9064cb981d6a40a34fbeee48381121ea7ac7175ffe5b506b11cf843d7
  • MD5 ef6f57941b0592e95cbea40f914cac18
  • SHA1 2b946868fe17ea1cf818a05580259916939aaf93
  • SHA512 308a0569695cbbe882b86a164e8df1e6219593c1ec7bd1b810b469bcbda7382c70f60cdcd6097984f59e1f44799cd25ba50d27f6b1c5cc7a2e07f83f81a324b4
  • SSDEEP 6144:BnPdudwDsSZjEBHbJfYIcSE1AVXx3Zbij/YxnhreOQxjRAuaT2KlPz8rmL5sZAlZ:BnPdwSO9fuPWZbcgxnhrhBuAlXsGPD
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2