Extracted

• • Target
    DHL_119040 documento de recibo de la compra,pdf.exe
  • Size 324KB
  • SHA256 d96040239b3b2251bbe2e9aeb3f00cfef3917b6427ce2b42260bb437351e6476
  • MD5 1c5cece36f1224e25e9157f4ffe7c064
  • SHA1 90b61d85835fa065666dd66764f5acc6f5d8c399
  • SHA512 3452d61b03e3531dd75d783ca46f397c03dc9a6dbc139d8b7f52d3ca6c1e31ad5f2332bc7756aca20abbb1e7792362240b69a0fcb22f7587a3cc65d7ef8f10ea
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookc1h5ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2