Extracted

• • Target

    DHL Notification_pdf.exe

  • Size

    1.0MB

  • MD5

    0eed93ef557e81e40fa08e03724d3353

  • SHA1

    bb5f4a0cc7009b4b87c7be65bffcf02c626b2017

  • SHA256

    2fcc629586efc9cb1a3f5773f8b2908743e3c7aa76f0597871b6ea8e0cfab9c3

  • SHA512

    152c2a23f61b1af1dec85173068ec5e4ab47e1fb1855610b4c16d60784d27037cf87517333c1a2440e38fcfc39aea4c0c107a13e0b28f66452b15a3c44f14225

  • SSDEEP

    24576:kGxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxNuss1djugHo:2jJHSnibHdAJmFdj

  Score

  10^/10

  formbookg2e8ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2