Extracted

• • Target
    DHL_AWB_NO_#907853880911.exe
  • Size 821KB
  • SHA256 c8483d4d8ae1ce3227dbc11e8cfaffa8559cce0ea5189adca701c01b0e439cb9
  • MD5 e95dbf796f4726228073eaef3633dc1e
  • SHA1 323e44785cd59e0025524e56b4ef229dcf82c5b0
  • SHA512 2ce29e45293b1ee8d93ba3bc64ec249cbc27a17a47ee3a957224de701185201ba737dd7e6a4efe9e5b66eb3207279b4dedfd4287c5597b5e1941e3779c766609
  • SSDEEP 12288:g/xTt25ZFO8Fhyq+rqgf1MexctyQR9gxsTQBjEv3FgXZ5e5LOaGPJCpKKFPz0:g5S7O8Fu5xcw0qEdgXZ5M5
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooks0s2ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2