Extracted

• • Target
    66a35846f0e7d56e6a3258d6f78c49fa.exe
  • Size 544KB
  • SHA256 ffb2ebccfae79f8c1d5911d41e549a8f876a10708053a4f3a3dbc2ec0e04be48
  • MD5 66a35846f0e7d56e6a3258d6f78c49fa
  • SHA1 5ea606fc51cc043bfd7750b3cda45001220d7167
  • SHA512 9c4b6cdd939bb24d02cd1f6ac54269795bbdba7796d9cbcd4ab0529f895377fce2224f41a6c48781786b25dc00996ab7803640fb31c0200cbbd4616c3c166b01
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookg2fgratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2