Extracted

• • Target
    DHL Invoice Details_pdf.exe
  • Size 810KB
  • SHA256 9ce6edfb072d05faec9d72731fc1ed955348a0a86e44eb9511eb215045861845
  • MD5 ae854f87606d45c552a7053ce1b9b0bb
  • SHA1 30d48c38a436ed81c92a8186cb2e64aa5685a854
  • SHA512 bc9867e5c2b17ef0b1b77bf7d45edc747d3498d36c19a01745de7c7bab56069e036740d490e0d6cb740d4fdab64679cce3e099f64b6033c15ce67a16f1bca254
  • SSDEEP 12288:ikfEuCXi35/Bi/i0IjFqth5xNPe4xcWc63xu1Gu2F/Z:si3N1Jqz9zcO+D2F
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookg2e8ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2