Extracted

• • Target

    FedexExpressAWBPDF.exe

  • Size

    570KB

  • MD5

    14ede9b23957c1f6951f9349aac1e5ff

  • SHA1

    eaba8b3dd5cb1d90dc648f004b40410979d09e36

  • SHA256

    42e319dba75dc914d5645a6fc1025984c6e64a34303cb7c5e9b936aade524efe

  • SHA512

    6b10adbae6db67ff112a4dc74ddd31c525c5c96c78fef46231d79b2c653b4d042b28d2957fbe24a77c48176b481b0a69a321ba682c7e33bb33962abd114324f0

  • SSDEEP

    12288:uHa0mNx2zIcbKWlCAH8ue+ISEyAxBjF7AHpuJotvbScHBzyyN8MwW:uqx2zd5p8Z+ISHAGschGyG

  Score

  10^/10

  discoveryformbookb31aratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2