Extracted

• • Target
    SHIPPING DOCUMENT.exe
  • Size 228KB
  • SHA256 70dfd7bc81878d265e39803f73f55af96d7bf2a336408b52cc6005785fbe0415
  • MD5 25e847b9631bc2fe8d87fe4278fa142e
  • SHA1 641756a84fdce68e101a53cfa6809b68190b7ad7
  • SHA512 82c1e56fa6a6611c45057c80190d2d7d220294a690044a164cdda39bc5e26b8c35d76433e3b1d7d247ef464d3307911a4a4337e52163177f4322fbe67579dabd
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2