Extracted

• • Target

    Invoice 16-36-55.exe

  • Size

    918KB

  • MD5

    c5b76d08e1571dfd19d3ab265ec85b2f

  • SHA1

    e9efd2d3ed741511025c1f1b0f1eb1d97aab111d

  • SHA256

    10610b7b6275e7e957ad8992b94b7488d1d55ad72a169f1abc5410f10c717484

  • SHA512

    bc99f126b422cf373af6f5851e7368471e0505e56a42f207a2d79b407fb3de95ebc1defe1ee0cfbaf46f09b3a514ebd45b3ca0195fdf0f8e2d94fc339138bd6a

  • SSDEEP

    12288:Rj9dHqkbfDk3OLqKGTSXzurVj0dEaVj6NAIZuH9lu08jexVbQLJKKmIjYUkt+pLk:RRhHUKGTSXzuBjVZNNelu0FCI

  Score

  10^/10

  formbookd6izratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2