Extracted

• • Target

    DHL documents required_PDF.exe

  • Size

    681KB

  • MD5

    9543b5b2255515598a9029b12bf4ba3d

  • SHA1

    4606c0dc68d132d32ceb0052e970e813eb881d51

  • SHA256

    435424456ff6964a551a626db39ad606b58644f6ae9189e1e590aec8d645c397

  • SHA512

    ad3c7a43372714bdcb2b73ba03edf315d5cb82d463c1c4f2e993a973ba036a3bd12b19b853896962cc84e90861d8a6d153e7f28c7f1fee18a09092b189f007aa

  • SSDEEP

    12288:9P9r1UoIG5MPUekc2vJPGWmEDKGS3BI951CqYxbVpQp1Lh1He3:9vUobyJC+9YKGr9rCqUV4BPHe3

  Score

  10^/10

  formbookb31adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2