Extracted

• • Target

    DHL Invoice Notification_pdf.exe

  • Size

    942KB

  • MD5

    80e47f3442ed4e19c8660dbdf9033e11

  • SHA1

    928b5e116468baeecba928ddbc1de8011121b129

  • SHA256

    6bf26b1eb1db8cdd96264df57faaed3eca70f6c01b592324e4b7939b0818e180

  • SHA512

    ba0107f896b6bd9518e5c1b85b191b19efb5722b842babff3937800bb9d404d0d4910bd2474459af38c9065d4ad8123a7582db8e1eec537f5e67122c31c94634

  • SSDEEP

    12288:KhLuyAHQYVo02R34K49um4VV3eI+MOC6DyP3sy5l2qWR87sewhIesI:KhLuyy7VF2R5w5WKDYj2qWRuvwhl

  Score

  10^/10

  formbookko29discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2