Extracted

• • Target
    SecuriteInfo.com.W32.AIDetectNet.01.21969.90
  • Size 486KB
  • SHA256 cddd7c5798303f779782f6d34ce93034647e5984f9b52f259e030201b538fc3d
  • MD5 4885539b3e4c613b3561c136ebcb0789
  • SHA1 5f0cc888304d12f4e59669f75bc36837b7cd5d0d
  • SHA512 6dc0fab4079746d563e3aa75252a27c9fc6fcf48d61a578cf8b8b49ba5116d1fa5e7bae8ee0b19b8955762387c19cdb0e0f4d47c49a0b69aa9311abe36e5955b
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooken83ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2