Extracted

• • Target

    PURCHASE ORDER 29.09.2022.exe

  • Size

    777KB

  • MD5

    c886ccb770ce75fd527764419359a07b

  • SHA1

    2c8d8762c84784887793c6685d02b8e18f2bb4f8

  • SHA256

    fbc14992308d88c7a33989479793655a4ff4c9caeb3c011f6e95b11c55f675ef

  • SHA512

    da6d5adc4b33a3389720c39094cc08b1d44c536a56f6b4610388711923cfdb2bc7fa9c8470d50239cc71d463ec1cd8f3a6a1ce6ac23d2d00c98150559034e022

  • SSDEEP

    12288:N2iN8yxhnQvuVOKj7ahCx7dY53i57gHG9281/Q8iDznP:N1iyxhnQvuVOKY47dVsHG928Wn

  Score

  10^/10

  formbookuymoratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2