Extracted

• • Target
    SecuriteInfo.com.W32.AIDetectNet.01.14877.24557
  • Size 943KB
  • SHA256 1d5f49fa09b805de66c2677afe0c55daa99ff7abafbb4dd5150f764b3fb26539
  • MD5 9c2ee0ffdc4ebf73b8b7d449a2a8c2a0
  • SHA1 32c0b9ee3ce9a7cb65c349918897e07e2ccbc4c9
  • SHA512 d5ca17ae9b6a401cdc5a31b74168966549d143a90b3ff7d47d0dfb48a663b2485ea6a263c84063a9948884320520c42f074d015356848483928c1e705f334531
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooken83ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2