Extracted

• • Target

    DHL SHIPPING DOCUMENT.exe

  • Size

    1.1MB

  • MD5

    aeffc423b2e483ccad4ffef8ff7195a7

  • SHA1

    85b40f249df8b988bdf42aad6be931d0fcacf79b

  • SHA256

    c66ec112e6247a7dd5171f17a0559695d0adc051b285ed2df42fe738c83efe94

  • SHA512

    692c07a901cc99be0d0b0f2d7f1272a9a6541a531494f34d43338a3e6beec9a3b6a3fbe9e42d2506459599dc7f17f59530eee893660788f08ec995f39e66cc9e

  • SSDEEP

    24576:JqDEvCTbMWu7rQYlBQcBiT6rprG8a3DtLxBLGV/:JTvC/MTQYxsWR7a3Dd+

  Score

  10^/10

  formbookjd21discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2