Extracted

• • Target

    DHL Consignment Details_pdf.exe

  • Size

    407KB

  • MD5

    733e85d251ecbc92481f2cb5ea55229b

  • SHA1

    34105be29f430e948aa05485393f7defb381f307

  • SHA256

    1b53c5714322ee87fc3d6d7e513818d009b98fbd68dab63767567b6b22864d4d

  • SHA512

    b410062f8cad5bbcb92b9163d8543519651e18c78a729b52719720cbb60717812536bb458a54c9630b58377bcd0807aed5be0bf0a8e2f812145ea52f93a9d917

  • SSDEEP

    6144:FweEwTKu1gRtv6cWGq9Ye/LydbuHfH+kIkC6uQPQVTMe8jL/MqEC7wkyeeyuU9zO:Mv6cxqye/LqUzIkC/aQBMH7wkfeU9H6

  Score

  10^/10

  formbookd10aratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2