Extracted

• • Target
    DHL Notification_pdf.exe
  • Size 836KB
  • SHA256 f740610774f6f97c82a45cdb50f0bec8f98e4e7dc7d26d9ab097c35b3a92bee6
  • MD5 235408aa1ab6134b378246f863f0b305
  • SHA1 79683e71665009f608176c5dda986cf5fe79313c
  • SHA512 d22e0eb36032d26e1ea42f51669c6db24355b91ba2d543488b28de5359915378e726a8ab991db76230f54f719b420629063324db39136b74ac77c7648d3f3ba0
  • SSDEEP 12288:UcVxepxE+ZhbKodRLRkW2LkKQmndPN7jmaxgKZ/nXt7virmWhlGLaQYI:vvcbXbbLRkWSv1
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookj17jratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2