Extracted

• • Target

    DHL Notification_pdf.exe

  • Size

    505KB

  • MD5

    f0093fc96991a52af29a8394a76dbcb7

  • SHA1

    3db055e6e517e90b97e32ddde02f1c01bdfe8ee2

  • SHA256

    9e6253eadc5d2960862d03ba5e28577fc6132497bd86f359557be8b8c22c1210

  • SHA512

    91adfd56d31d7188dd7f9d571c8899c5281029a1b36ee7778c5bcba6662b838bb8ca14213d3519873904788602524deebb10fbcb95751b1b4ffdccdcd42a4632

  • SSDEEP

    6144:JFwBaw7c7o3EGEkTXKEDCO4cBPliumuPVxgrPskBXd5LWhU+7mLPjfYCXbJcO6LO:j4h7x6kBDNqsk9LWR4PjfN/ZFeE80P

  Score

  10^/10

  formbookg2e8ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2