Extracted

• • Target

    DHL Shipment Delivery Notification 27-9-23.exe

  • Size

    323KB

  • MD5

    d500caad040c54a8a064bb1ae1e02277

  • SHA1

    02f4722d98277480d4d128e3321f156e0471bdde

  • SHA256

    c261ace97411301444d9dfa50d29f9a0328e83ddf45bf15128ad9d796d050461

  • SHA512

    1898e9b94b4cd314327473063b3d800f5eb91a7b5044d72f801251c0a42c8211646974ddd753a0f80dfdc647a056032d3041d41ecec7a890bca78c6751c4cde3

  • SSDEEP

    6144:BnPdudwDs9iDkylpSqHCJLYFn+dBfSVuMKdWKPcmr5tT/RIQzNfov32ZzjWusiD/:BnPdw9iAmpbHCJLQneBaW8KPc2tlIQzp

  Score

  10^/10

  formbooksn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2