Extracted

• • Target

    DAISY V.ECL1108W-PDF.exe

  • Size

    1.1MB

  • MD5

    93e57450c90b6912c657fde7b76ed1db

  • SHA1

    ae39be063eebbd6d318dd312c5bd82e87555be73

  • SHA256

    6f12615981ea5f427f54ef352f8f2c08bc2accdd0102fd65cf3a0f645daa21bf

  • SHA512

    e87811eee759aa3abeda2cc5d248bc129b1f5ccc091ec3312f5514cd174b95bd21316f649f6babbd0641e5d87047d239b044d7d7a640fc5097a874e9f5c5df2f

  • SSDEEP

    24576:aYFhmyryU1xr7hWeXjBcM1M9Yp+J0stPahm:aYFsdAnhWeqM17w0sFahm

  Score

  10^/10

  formbookgftlratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2