Extracted

• • Target

    DHL_APC2_240708172813545_8476086290.pdf.exe

  • Size

    1.1MB

  • MD5

    76c40149b0f69c5665d385b82902886e

  • SHA1

    764943417c9e7210f665573062af350d91e0da87

  • SHA256

    cfd3622bf94fdc5308862e61697d0fc00a6038493fe5686a230979b9e7f2fe0e

  • SHA512

    9d41a030755fcad143f391fa48069872969ed90828cf882420289d8c4e25b9b59d29758d699d5698d46a83472fac7887ab4fd0a8eddd4b570c7f53ed6ba504bd

  • SSDEEP

    24576:v4lavt0LkLL9IMixoEgeax7Lnu1Op+baHZMf5fiq9MmCS:qkwkn9IMHeax7TiOH/aPCS

  Score

  10^/10

  formbookrn94discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2