Extracted

• • Target
    SecuriteInfo.com.W32.AIDetectNet.01.11307.22355
  • Size 489KB
  • SHA256 26016e9aa9599971b46f615444f0cef3e1a56fe92fa2cbe49c4d14ac05822b13
  • MD5 87481a318b9d8e2451554b7eed88a7cb
  • SHA1 2ca823a72b267f383fbc3e2d7edc4526cf56d38c
  • SHA512 ca80ee27cc3a8948e891f590556ceb0b2699f52da9a3bd788fc1c409965861b62624fd55fc6955419fde9efadc2736888d3c1313222e527dc510a3641f6ee75f
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookas47ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2