Extracted

• • Target
    DHL Notification_pdf.exe
  • Size 786KB
  • SHA256 6b3682d4e307a5bc7708356c396ddb4133920fdd33e1ad61f8d9b98d8920888e
  • MD5 84b4dde92650987dcc1a8bdff7134d7b
  • SHA1 7f10aa0492a66877141f06c0a850e9335557a60f
  • SHA512 5aba8416af9a258d50be8ba55b06d5b26183bff85c689974dc3c1213a5e25812b2eaaabcfa34cbf93bc79be22a20834189984a0e37d0c4543cfb3bba9debb48c
  • SSDEEP 6144:SkN49KG9qNca1gryUCpGEHBWnGrkr1UMFLsj0qQRt5lH5s+uhEFeDVxVm8YOl8ZP:S6pG9qNca1aWUnGb7juDZ08oVX78ak
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookko29ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2