Extracted

• • Target
    quote best price list.exe
  • Size 9KB
  • SHA256 e9f3be0c409dfce073fc55ea97594b0ff18f7953e1793cb7aa8a7c0f87549ebb
  • MD5 a06588190e62062bd9fc0109a5351b1c
  • SHA1 c0d2b96a5aab317845df9efdc1ae62d36a2e7f5c
  • SHA512 fea84aad361ae4b3cea13eb6902975470b36cf8ac0d29bb05a2a11d408c074af0c00526ec5f5727ae7edb4e4563fe0250a4e9a7004191529b4f0a634da9f9e52
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookby78ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2