Extracted

• • Target
    INV-DHL202038.exe
  • Size 424KB
  • SHA256 c0255201237bfaac3d1396aa62c0277631f9ccbae295de89e71b504a1373002a
  • MD5 4c0b272dd02c5122e1d8656ef6df3f4a
  • SHA1 2f1486fcac72c3577669c104890e100ea5a9a419
  • SHA512 b95d1cf9a7847459f0c612890cc9486f27fda6cfcd4c7f4867cd5cd03b119fcc36c0f6d7f7a53b7d5581734268e42e141368ced40368c17b5ea2bc7672a91471
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookcn31ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2