Extracted

• • Target

    Fedex Awb Details_pdf.exe

  • Size

    597KB

  • MD5

    76aade8ab10a9b3905c5f70932cfbf0c

  • SHA1

    d8121a7513306da0cbf09cbda5005fc63f76d262

  • SHA256

    e915f0f594c0cc1c43241cbe47784d5a203dc521c341eb8aa95c6e6d10ff65b3

  • SHA512

    dfda440ab221993a379bd67eb7d636bddd11cd2d1fd4dd1e21a38f04fbdad7b150f3455bd918a9f9283152599075f6b4fbefdf7ebe0984e8a038742a30a5fc87

  • SSDEEP

    12288:gmKuY7YDwSgBTh9I1v9r2eI8Q2Wz6iFWX4DiZC:DKFsoTKa0nWzTFBmC

  Score

  10^/10

  formbookb31adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2