Extracted

• • Target

    DHL CUSTOM FORM.exe

  • Size

    304KB

  • MD5

    b816065a9a3059dac6d2678ee04936e4

  • SHA1

    31e418e2307d91530141ae7da299336d37bc9548

  • SHA256

    18241c79365258168f917fe03f0d27cc9c9ef3dbc81d3161ebee32887569496c

  • SHA512

    5334e9dbac0e0ff21eadbf0a0a1b160769b3e53e7569eb735f3c95a662bdd2e60a6d56f63f76b3b49076ba74d132c26be89c042f29f35debeb6343d136ee4a42

  • SSDEEP

    6144:PYa6x3UE2rt01ZjFd/yeKFgoAfW3jUuhVN4N1HEk+0/479hyOaQcmL:PYD3U36LpZyeKK3W3pN4N1kk+8u94HmL

  Score

  10^/10

  formbooksy22ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2