Extracted

• • Target
    DHL Shipment_xlsx.exe
  • Size 290KB
  • SHA256 a83afdd193623f46ac870f04455f2176d64466c5e2d3cd92eda0498de29f0417
  • MD5 94f327c3dbb3880dfec7693a1e1ffd72
  • SHA1 f3a3f8f53d2b7b751f461b5c04941a4740344511
  • SHA512 04f770950f7cef42662f210a8b8793004b84605c5f60f2527c77dd27d04953030cc2b8ae1b6aaf608c7e05025fcfee7bb1720f870b66671446284a3cd56ba13a
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookby73ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2