Extracted

• • Target
    DHL AWB#16062020.exe
  • Size 321KB
  • SHA256 972dbabdb87df7e564d3b5162d94d22ccb326a6f6d2150f3a9b29bc32e8feb32
  • MD5 6b9b5f5019a647d3366671280ebd5608
  • SHA1 fc207bdb750879d0d7cd66ef2520b64378af5d1f
  • SHA512 ea83cd0a7088637dff304b0dbcc3a9596ae6a0b74ac61a64ea74f1470e2e735425ac6fb37e3be3b9bef480941f1e54a98ae0382bb641cd3dc17a6e5c4cf41cba
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratrezer0spywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • rezer0

    Detects ReZer0, a packer with multiple versions used in various campaigns.

    rezer0

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2