Extracted

• • Target

    SecuriteInfo.com.Win32.PWSX-gen.7343.exe

  • Size

    799KB

  • MD5

    8c79afded9a086eee3362194e95887a8

  • SHA1

    2f53b1e099edb768f937155cac9d0f00042f8c84

  • SHA256

    5b0bae068b7cfad0ecf1ff6dace393fffb20143b981c68effec661c0117cba5f

  • SHA512

    054697742f6ab15474e90c1fe847268807764fc3d77d88db9e93d08cdde71d02aa2b611db0d2998ef88d566687c3acce086d1c0cd9145c2e3968299221e6d72a

  • SSDEEP

    12288:6wEdMDC0iJPkVe7M/mnO+sRvKNCp7w+kyJksQmhOD6sjub:3C0ilYe7MenO+sRvKcydsQeOD6a

  Score

  10^/10

  formbooktbgnratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2