Extracted

• • Target

    e2328874b4deb0accd85b76ba1a5f7734dc7e70ff17f4722bf9158d54a0aab96

  • Size

    747KB

  • MD5

    86882908b1bf788112a2da6bfde08a7c

  • SHA1

    995c4ab5a4bab535066635f287f87799691f4ff8

  • SHA256

    e2328874b4deb0accd85b76ba1a5f7734dc7e70ff17f4722bf9158d54a0aab96

  • SHA512

    88af00ef5a33ef12208ea42e51b1892f127bb755b3032beef8bc3d281685d9fb82721cc85bce672740773dca38c2f55a816175effa45a86bec69e20b48783321

  Score

  10^/10

  formbookfs8ratspywarestealertrojanmetastealer

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Meta Stealer Stealer

    Meta Stealer steals passwords stored in browsers, written in C++.

    stealermetastealer

  • Formbook Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2