Extracted

• • Target

    DHL Consignment Details_pdf.exe

  • Size

    690KB

  • MD5

    c789aa7c8b719e8658ce0e7a0e626799

  • SHA1

    cf277fafb24b94cfc00555d3791141b3e522aa95

  • SHA256

    fadd1059ba6d602427a8d00daf8e93b283ec5fbc8180ce65fc246ebbb4ef7318

  • SHA512

    ef73dd758e1bbbd8366efe5352a9ea4a46e3ef6b68d6098063f2736512de9d4a804a3980c7560f2bc7afecf1cf486d6b8f6972179e7f542165a9e10849e64a43

  • SSDEEP

    12288:5c3dxGKJK0nMV7oNeb2WSkqt9Ai0pVe6LLOi6HcjSCAmZJbxpDF:qN40nMV7Ue6RkEp4JL767CA

  Score

  10^/10

  formbookj17jratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2