Extracted

• • Target
    DHL293413110038.exe
  • Size 384KB
  • SHA256 bae14f53a8553b739d9eae5d0f751e608e7f33f3d7fecf92f345bc806bf676d5
  • MD5 09cf2a72e211284eedfe88440a80f39d
  • SHA1 7193578806a365d78b7fb1e9208484d874efc10f
  • SHA512 c126f444eb1987c45b6c77f7af33b7535d652c0c37d7393bb50c74024ea09e48d7a95a7d04768ba925836e12b31b4f7630d1b53db9db36fc47e7768f260f478f
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Maps connected drives based on registry

    Disk information is often read in order to detect sandboxing environments.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2