Extracted

• • Target

    DHL_AWB_NO#907853880911.exe

  • Size

    871KB

  • MD5

    431b60e72869b18bfa6c9fad65b9e72d

  • SHA1

    57b840752045ce062c2c71fb4c1fa15eef23c3e2

  • SHA256

    5298c6b4b9d91cb0847c4411c267390e94fe45c870d49aeb84956244114d2ed3

  • SHA512

    83422a108fc37951e2f425fde3273d8baae1aadc60e0775b2961991486909569bc5f02ffcebc79020b27a0ad0d605bf5c5e837f833fb9ff87604f31e2dc63ca0

  • SSDEEP

    12288:+TH/+u5ZM4e/ZUdtbXbeLdFQVcM5eTmiMOCBfSkWKbH6pNUy8zAxlw3W1IWdmo:Af+MNeBUdtLbeB4RedC4uj6Hzl3r

  Score

  10^/10

  formbookfw6discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2