Extracted

• • Target
    DHL Notification_pdf.exe
  • Size 866KB
  • SHA256 dc0fe4b4b6bf019790cdf82fda499ae14961fafaedf137aa2325b30fe2f8cea5
  • MD5 adc893c87d953dd99237ec5177a4ddf4
  • SHA1 9afebfc8d415a165d73229f4b211c81be897ef73
  • SHA512 001134955854c9438b9dae1a23ebd482564f3331a7443227d91afaa08ceddce651dd751ccba2871ec6f388c095099cd65ce28f9c61c56cddda017a20e2af11d7
  • SSDEEP 12288:53xf49IUAysIJ4iV8mLNWgCawNg0JhwRd5CVHkWt5TGr:B2FAysIJ7dLogCaMg0JeR+kI5i
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookko29ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2