Extracted

• • Target
    NEW PURCHASE ORDER.zip(~353 KB).exe
  • Size 1.0MB
  • SHA256 dba99585218765f78dddf353fa0bc8cda522649bb25e13d71dfcd316e5d7c3f1
  • MD5 fb399b6632892d4e8ec9e0f7855cdef9
  • SHA1 a117ae3562ee7ab10460312aea893bfd47af40f6
  • SHA512 9bb8db3e136f27fa10473dcd39638e852447f98434880dbe12aa586c066087c291298ff15abb30d65adcd2d5ebd7622673a00a6dee904c2bbc4c563d08cea0e4
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookjr04ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2