Extracted

• • Target

    tmp

  • Size

    1.1MB

  • MD5

    911b41caf07e1358460415fe7ddc9ba5

  • SHA1

    2a2e2120055b91824166b4cbecb86b25cab7a6f1

  • SHA256

    4562af450cbc44c9ddf59509c802f83abcc2dc66a2eccc0b734ea7ceded60522

  • SHA512

    92f5410901ce62f81bd2d1e0e86cd3492b05fcf415a271e9784994239296b3001e1a53b5ff176d1c3cc09fa42ae1e0c379cada397c74d7e232590e048938b80d

  • SSDEEP

    12288:imIFTT41hw4e/ehLrz9+maNmNR734hodpBXk8jB6rSDdrCsv6ySk1hw4e/:lIF/L4LJwNmNYqpBXXQCOsvu4

  Score

  10^/10

  formbooknytcratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2