Extracted

• • Target
    DHL Shipment Notification 145336786.exe
  • Size 865KB
  • SHA256 21293dba237b25dfdbafe677d095c40a4590c0b16fa5f22728b768394aa1ee0c
  • MD5 8d6192f22da742160ed5547a2323c97e
  • SHA1 f04760183f3eeebaa53faf0f6443a975233ce28e
  • SHA512 4d69482f4f5f61947dc571d16a53baafca79ecebb07f2f67fb5c7c80f42164bdab536b0bbd499d7dc55ab381bf85d06e70253a456daaaa001310e34e6bd83014
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2