Extracted

• • Target

    FedexAwbDetailspdf.exe

  • Size

    544KB

  • MD5

    e081a5f2bea797aad5cd3e9e934bb8e0

  • SHA1

    af59729a38b512cac6c3fd8896bd8123fa9bbdef

  • SHA256

    e23bf1a652dd78590f79e4a350dd7869c9c5477ef9d1dcae78504ac4fa46cada

  • SHA512

    af8210c19cdbfbd949d0d92921b98ba791e027548b4eef0f02a1efab7c6b621c5c90fe764c04b90528bd855b11d307c82bd9844adec2a8a731adce5267ab0f6d

  • SSDEEP

    12288:ygRzUZzOZgFlBNeNpoMNfsoHD3DopWIzK//a9N:nk9FlTeXLsoDDRw

  Score

  10^/10

  formbookb31adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2