Extracted

• • Target
    DHL_AWB# 9678547836_xlsx.exe
  • Size 254KB
  • SHA256 8c8afc7e873c1fc04cfc9cc2331ed6f46dad4defd1158e39f10258ee4b477758
  • MD5 fa4058c74adee3029c00d0e40d0e2461
  • SHA1 a4ed48f10757549cf114a656da7fc7d9d27be36e
  • SHA512 b302a158877611d0fa61016b97f8a94a8747ff94737d9de4381ded94c1534c4844dd59bbf187ca5a59f0433e60b8454064959d173e298f6f2b0000885c904a17
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookr75hratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2