Extracted

• • Target

    DHL AWB TRACKING DETAILS.exe

  • Size

    1.1MB

  • MD5

    ba26455cf5b8d3d0ffa513646753bb30

  • SHA1

    81eed48c8e33e92d27ca58643c038898718f8055

  • SHA256

    e652619baf01e42513f4730ba1089b74c7801327fd260fbde217b2976cf3159c

  • SHA512

    fd298806eb55b202aca68470ebf651277149f9125088b0d7e4a0e4b61c795336aad96b22298012098eddfbe854149b19775d30590f09761602c908fab5cc6788

  • SSDEEP

    24576:ffmMv6Ckr7Mny5QLUlv1VtfH/CnRsf5Pvj:f3v+7/5QL8Vt3Osf53j

  Score

  10^/10

  formbookjd21discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2