Extracted

• • Target

    PO-11059021022021.exe

  • Size

    663KB

  • MD5

    f79dd4569875b93a8d76514917da8ed6

  • SHA1

    3cf17a7501bf43730c845efbb43bcf1135690fc4

  • SHA256

    b0a89f3465bf92183fd7cb61177ea2f13eb9ff3381ac06f4b14c642742982405

  • SHA512

    736f662b306040745bc992207cbf63a4ee0c0f0af65bf95d120ed2644ead9ceb9a965ad9329da01794ca4b8fd55b1f50f544ded39461ddaf22ee46c9bded013b

  • SSDEEP

    12288:Y3iRW/RKn40HiVwnXRxsfCQ/UIAObPDckWW9s5+oXUcC:+SHiKXuL//bPDckxs5TUc

  Score

  10^/10

  formbookbwe0ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2