Extracted

• • Target
    366e3044dcdd44abe913fcc704d70b6c
  • Size 756KB
  • SHA256 5968a20b202c7e35ee2a6731bc76e5d91872820c2c500cdca13539c33c65dbd8
  • MD5 366e3044dcdd44abe913fcc704d70b6c
  • SHA1 8c826d6abe740e2b578b69ae95f99ffc61e96074
  • SHA512 c2afb9795af69f792e5ee7397038b43d99bd59d702bc1c0e4bc8c222c42bde7481dcc8ace842f1a51935597921d8ecbeb3e6e54cf0adaef9ccef9d22fff30d41
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookg2fgratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2