Extracted

• • Target
    b1bebacdc1913cbc1571a740b224e455
  • Size 519KB
  • SHA256 879ed7e70f3065461580484acb99e57762c9c86f1a92acae280fdfecf0f50cbb
  • MD5 b1bebacdc1913cbc1571a740b224e455
  • SHA1 d74ea5ea99dd8e989fec414224a79b4e2ff3fcfd
  • SHA512 195504ae970cef107e7ec3c638e23bc15e2c433f5569eb53f2a5f0eb9d468465316f762b2bf9b3bf9d2f14ab1a17dd122a89079fcd891b86d932b03ea08554cd
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookg2fgratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2