Extracted

• • Target
    DHL Notification_pdf.exe
  • Size 872KB
  • SHA256 3ead4a9301d72ecbfeb8a294c4bfcf2476a1f87c966fea663fb8d873c1b24d6b
  • MD5 030f8313246c548e82f83021299976a1
  • SHA1 96ee7c45d7f6df4f388c0e3f6639bc375e300fb1
  • SHA512 2ce8f8cdc5395ce2ea50871be6777a70c1e6badacb82edb423f3cd975d525eb3a56b470fbdc6a86f70d58e9c96af1e7959d27fdb446bb8b8d15b52e0218fcc43
  • SSDEEP 12288:02iNwfEuEPB0VQy07Vgw9UgpHcD9cw7rYMGjDB112c9M+4:01BPSVLcgmUWHcD+w7r9GjD8cW+
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookg28pratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2