Extracted

• • Target

    DHL Notification_pdf (2).exe

  • Size

    696KB

  • MD5

    5f5922ac6fadabdcdca744e79c6681b1

  • SHA1

    9a13c929512460bab2bb95b07018c7e0766fe81b

  • SHA256

    0ce125663c13098237173a0f183ed629019cfaa7a79464a34f109f48e83a49e6

  • SHA512

    99a9b4623da4f119bdc4e05c64b29c5473e6e0c99a071ee7294b99ed78c032f3af18ce5ec5cb97996dc7e30373d6b4662c1c7e392a5deccaffef2b6db0b87666

  • SSDEEP

    12288:/qgh/PsZ1DX/VDJXyx8WjqAwZCzH+I7Y2+LFcATq0jobbvYSVrY6P:/qgh/PAyr3mCzH+I1+LBqWyVrpP

  Score

  10^/10

  formbookj17jratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2