Extracted

• • Target

    DHL SHIPMENT.exe

  • Size

    274KB

  • MD5

    904526ba0b032ab844c0b258a9b038a1

  • SHA1

    2c5ae47c87cf9111300fc0063f8054a5e33e8cab

  • SHA256

    ba51afdb597f570e1914c3253b219b6397f9df8f6448a33991dafe561706f2db

  • SHA512

    ec393d0efe237a274570dd986d162748fd8d6dc5183a2745a6dd8870b21f000fa495742937e19f05ea6220c27adaa21f7a1ecafa7bd20f070a54334d8cb14520

  • SSDEEP

    6144:nKsjATsXadzG3nGFqPwlwV/ERgSi1AbQ6Qi33IBzz6jG:KsjATsXaw3WywO2gSgANQioBzz6K

  Score

  10^/10

  formbookfqsuratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2