Extracted

• • Target

    DHL documents_PDF.exe

  • Size

    727KB

  • MD5

    3443feb2f20fa6f6786c585a984d7f3e

  • SHA1

    fbda1359faede8b116b7eeb24c02e422f05f674f

  • SHA256

    26b9c2220fa1bef6a477b8303062792420b9fbf3eb4d21da840b11bf93c5d9dc

  • SHA512

    f3f4a4bcae338a24a53ca5125317eac81570234c818679f53f8a4b36a99738a873c5a3bbddcc431c43f262c263f353cd4616d6e81ba92c7af6b027529c94422b

  • SSDEEP

    12288:cePDXRuoLrmCi5WRSKT5rnzjQjfCplpuyjAMqYmRgStP+H7A11HsX:cePp0KT5tuysMqYYmbG5s

  Score

  10^/10

  formbookb31adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2