Extracted

• • Target
    ce821b7c719322f469a51639ecd38af0.exe
  • Size 1.1MB
  • SHA256 0488a1801640896ea2e4922dcd03d47bea603db8b938aa2060bd529060ec37fd
  • MD5 ce821b7c719322f469a51639ecd38af0
  • SHA1 bee2a4f45ab9a1f2e3521953cd72192bf619df0a
  • SHA512 4286e315674c83b8c86a18200d1ec0c6fdf8a086bc46369a6dc8bcde391372b5892672c39dfe1aef739bc7407044ed96a7b3a814717ca3ebe9c519a232687309
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooka2rsratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2