Extracted

• • Target
    DHL Shipment Notification_pdf.exe
  • Size 430KB
  • SHA256 205e6c6df8dffec4ab2525d317bf4f0b79ab0fd4c84b197ec8555adcf8f15e40
  • MD5 ba3cc95fb5384c855a83b2c7eef89658
  • SHA1 bed0e9f85cc884fe614b85a5e4280444ad017678
  • SHA512 d86673d9700a5e37f68b5291524300400699f7011af72d8165c12c90f1240f9ba3708e1eb12ed97d656229db8cdcf2a56bea890aae6eac7e01e350b107ddedc4
  • SSDEEP 12288:wbwv6cxdNE7AhxQHWrHG9Rlkzk9kLufPuu3X:wbwvlNE7orBzk9kLuf9H
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookg28pratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2