Extracted

• • Target

    DHL Notification_pdf.exe

  • Size

    907KB

  • MD5

    a63819a14227fbfb09bfe76a6635816e

  • SHA1

    67e165bdb5b954464b9b8586ac2f12e304cd5e57

  • SHA256

    0d281b8d5f9c6d1b0a44d2df62a0bff19a14097826ab821218563b3e2fca7826

  • SHA512

    9d166aab889d63e3f8d191441ce9c9a0cb02207fd96f490670326fd99c15f2e2bdec3f7d66c60329fad3e49fc69ef6051f891417b210a60f566cb186e7327913

  • SSDEEP

    12288:MOq/oCJJ4mUs2iNaj/fieXm40ME2AwuiqO6ePGEDxQNUTXECiOEWM5:vVmUs1C6ODEBit6e+ExQU3CW

  Score

  10^/10

  formbookg2e8ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2