Extracted

• • Target

    764a3d3a0444a7bafb816a39624a5e2ae85c0465f5d13c63dd6fda04a35696de.exe

  • Size

    865KB

  • MD5

    6cec68a114c5819a40c4b2d5fcf842da

  • SHA1

    96d986f3ee7b4e8df59868337621d282ece89474

  • SHA256

    764a3d3a0444a7bafb816a39624a5e2ae85c0465f5d13c63dd6fda04a35696de

  • SHA512

    58265c58039a514d7cd888c612a15ea1073ad209cf72627aa20b11f0a53351d42bf6a5a01860da5c22036e38fe17ec5f00d914f29992b9a062d7958556688341

  • SSDEEP

    12288:+UxjsqTpr6h76xNUNpkUmVhzKMJBjUwkBrjXr5dsAjPJc:1pTlr6d6QTkpVJ9TYwoTs

  Score

  10^/10

  formbooktbgnratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2