Extracted

• • Target
    95ff1b2ac39df0ad2ea1949b63257b6312caadc9da7fbe292f71e6a3d4c8c624.exe
  • Size 779KB
  • SHA256 95ff1b2ac39df0ad2ea1949b63257b6312caadc9da7fbe292f71e6a3d4c8c624
  • MD5 0309dbe3bba6d5313291ac40eced7bc4
  • SHA1 3499d49bd1fa754df864531dba10e92f9bc3defe
  • SHA512 cf7ca67558b240d52c66456f5bc898607c736f937692312a847cd1b2d2f2fee4c5a0c3d158160b6095f8cf96b9f6575f3aad31088a768144d132ebb6d3945cc1
  • SSDEEP 12288:QAU2iNWP9IG4OTM40M+jLHb7m7TUp3REhxVl:y1BGJT9SS7TUYzVl
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookjr22ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2