Extracted

• • Target

    DHL Notification_pdf.exe

  • Size

    909KB

  • MD5

    d5bf6d80b927d780b23f97e814ae8743

  • SHA1

    a6b3d9793f03a75fb353c251ebdf9f9812b23554

  • SHA256

    dc28684bf9bab25ac4e38be61f2985ed7982bb54ec24304917c8a02affc84b70

  • SHA512

    5de8caf6847b3c2a212cc085cebbd69895e1cfa032493fdffa7932e3008d21d773e3b147f1c96e3d772bd9eeb388977550e531e9134261ddaa8948cef6706cc9

  • SSDEEP

    12288:Dearup/1zvnT+ZHac2E3y0nz34pCRpDki9WLGsilJqkOFGYcWjwSvd9dTvZ+J363:nUzvT+j3ySv4qTqkOHjw

  Score

  10^/10

  formbookg28pratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2