Extracted

• • Target
    DHL Notification_pdf.exe
  • Size 795KB
  • SHA256 f7a7449eb951a7d22c86e724847ec737f1a470e0a180a877cee103146af8eeb7
  • MD5 4408c367d1123f177840af662d69f906
  • SHA1 ddf23380cedb240580ed8110bead779a0efab064
  • SHA512 995da8ca9902aecd55c0d50c2a29cc5799c48fe4efbd9b11ac2d5c6954c51804a13b492e239f46df23d13010ac8f18a0ef44766ac84377f4300414c7aac4d7e5
  • SSDEEP 12288:sxEOxdueKJis2iNUdrw0l1/YW+dxcT+++g0oIUJ8YZEk4qm4CRE2PX+oNa:sxEO7Vs1GFDQv2Kg0XG8YZEjqyER
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooksz17ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2