Extracted

• • Target

    DHL Shipping Documents.exe

  • Size

    601KB

  • MD5

    ff7a12a393bbeb76d1af987d9950984c

  • SHA1

    914b9190399fbc2e09c5cb5d861cd12c39f9ecff

  • SHA256

    cec022d6875e34bf7b1b9691599cc582b86f7fc7f860b9508f8a676002ae99b6

  • SHA512

    5e7ddd30e6b838ff35436ca8ddbf3a84e073ef61f140fd17223cb81062123d743bbff66a4b148dc8ce1ab66872a387ec6d9fdaf1f818ec113a88c417f335099b

  • SSDEEP

    12288:rtH0/rD6DCA2Z3pzOEvThYIKs9WmPcjYgkrw7cL67r:STDiCA2ZwSKGL0YTrw7G6

  Score

  10^/10

  formbookcy12ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2