Extracted

• • Target

    9586cb34f6fa42b5b89f4457f775731256f1b53ac22aaa3a35aa4ad305f632a7

  • Size

    783KB

  • MD5

    8f837ad0951a94117ac86dd6385ca5c4

  • SHA1

    ab800928817a085631f1cf151b397a6d641435d6

  • SHA256

    9586cb34f6fa42b5b89f4457f775731256f1b53ac22aaa3a35aa4ad305f632a7

  • SHA512

    6fdbe3e2635740284d51329f4f927175ea40ce099115722649e92d6975a3a2798253b5194be66818e344a4eb8038f1fda2083c279669ecfb496162d00af19565

  • SSDEEP

    24576:rqUT/0shbH1vT/0shb+b+3KwmsrN371ScRP3:WC5HA+3KnsrTSW

  Score

  10^/10

  formbookggn5ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2