Extracted

• • Target
    21c94e7d74d2b52a42e9304b875e69d3
  • Size 1.1MB
  • SHA256 acb0ec13d308fba63fbc5fd12a66d4f72e61692bcb04bd051ec7844aed438e3e
  • MD5 21c94e7d74d2b52a42e9304b875e69d3
  • SHA1 0b594bbf1ab5059aa9f04df430634d35e9651e3a
  • SHA512 613c56d71cce710abd3086cd5470ac73e5699973455505b7a8e18819d5cff8e230cd3285c4872583f04d77b772c07af3d3a531bbb3f4e7cc301ea594b54e6ca2
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooks3s3ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2