Extracted

• • Target

    DHL Notification_pdf.exe

  • Size

    955KB

  • MD5

    e4d3a2a96f83710d4f05c95db5bf32ce

  • SHA1

    560a72bee671905998930ec51ba02a03644242d0

  • SHA256

    2e22d1469e5bc652bc2a5d4180e4ade7f280515b12546416dd9cea6ea4b2ca3b

  • SHA512

    ee94abac814d0dc4f5e7d2d14f1bb31e4ae3fccd8624b2240a10b6c5d6568733a9582f25d9b0e5a846992e1172485a0794b562d1f409d31b54faaf34555f666e

  • SSDEEP

    24576:nv2fBGmdLD9uZW8T90mDrM0E+91Sccdj5Mw:v2pGmhZuZr90mDF9Uuw

  Score

  10^/10

  formbookko29ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2