Extracted

• • Target

    DHL Notification_pdf.exe

  • Size

    572KB

  • MD5

    5d0704142349c70304df4a3e2a401d6b

  • SHA1

    d8c0caf793b78713ac02dcd09e0e326d6bd45b18

  • SHA256

    8206e029f0266ea051b039afc8b9427f70079ee9d9ba4cb7cacd9f944fd2e9c2

  • SHA512

    bcd473e62bdbf5162b300575f41c2a9e3e008d3ed8a34dc875fb81618cddb8b55d1656a050b176d9f7a173dcb93ae0bf753aaaa738b82f98bc3978ee2606456d

  • SSDEEP

    12288:th7vEV0mHpuSvMvEahAaWP7IneAdvB3RwkdK0t95/KLEyLONLb/:kPTaGknvvB3Rwko0P52EyLO

  Score

  10^/10

  formbookg28pratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2