Extracted

• • Target

    FedEx Express AWB#5305323204643.exe

  • Size

    675KB

  • MD5

    3ae40912766339837da60e6a29e72791

  • SHA1

    f7a3e4560435770745d04a9abf5ae4b88b29f2a9

  • SHA256

    a31bb86950434c10901f781ec299b84323cd6c199b557f39653cdc5557641b6d

  • SHA512

    88446cbf3de77af430bdd18c0d7932789fbe626b236b318701b3e6b1d362d8ac4f6166c84cc254594efa0be9307af4f11bcb3dcee8792e499239e39ad745ec41

  • SSDEEP

    12288:4nCb+eCSmzZmUpNPGNOCQmO51NvC+lyh8A7/tbRTzJc:4uCBMwhGNxi9l4/Tz

  Score

  10^/10

  formbookg92sdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2