Extracted

• • Target

    cd5d9b007cb1b71e7c70071c5f8ca17d4a994cdedbeae383de55345cceec10c0.exe

  • Size

    832KB

  • MD5

    488a92e53724b14f114bf642ef01a598

  • SHA1

    4ade82db0e3762a754df784e1174741776b77b79

  • SHA256

    cd5d9b007cb1b71e7c70071c5f8ca17d4a994cdedbeae383de55345cceec10c0

  • SHA512

    c7b37e61fc3604c3079725c48e437cb2128fabf0ad13fd6b6a2163def410c6f56461457cbfe811ba22ffdf393228dc5cd13ba6c36a58ad3daada6d1d5bad33af

  • SSDEEP

    12288:Of5dQ0pNedvv+JlebXrI1/J+YDQ4XXA0BOp9DIXZzRb:Of56AoWke+H4XwaO8X

  Score

  10^/10

  formbook8awdratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2