Extracted

• • Target
    DHL Notification_pdf.exe
  • Size 967KB
  • SHA256 3b84741209aa65fb5e17fbf1610e52c5728a9cd9ea3ab2a26be29bc21ef46b69
  • MD5 72175a980e43a900107a54b77c22ce2d
  • SHA1 fcbaf89889b4e62410d5ab35298bf338c4f1b12b
  • SHA512 5b721d840308666dc272cbed74d25517f827482a5c7acbb68326e81bc53142fedb14931cb62a5d4afac1f41a4b41d5b2a8591a4af58278c7c00e32cb2d8fb0b8
  • SSDEEP 24576:/M+L74mBfNUstzof0J7fiVcrUxjPdDn1Dq/3r8JN:s0Jr5yV1DGI
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookg28pratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2