Extracted

• • Target
    DHL Notification_pdf.exe
  • Size 754KB
  • SHA256 29c4e55197ba9fe3ee35fc40692fcab1dccaeb0fddcfb9e791812904a2986d4a
  • MD5 c9997ac40ca4ce7bf51f15e96d071232
  • SHA1 4cd05de442b9d16fe753abc379a27c92689866d2
  • SHA512 f756bddcdd153b87b52dc9c7e99500c507f66dd143b0fb76315c871ef390c32d44c6eb37a2df48edea56666e13cb34da5e6eefe64c5941326b02000cc9a3539e
  • SSDEEP 12288:HfjsVyCnu0bvSDyJ2BaAbQXZD850i/QfKauzjQTl1HmZZN5KE:/jkf3v3J2A8QXyQCrjQTl
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksz17ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2