Extracted

• • Target

    tmp

  • Size

    1.0MB

  • MD5

    da04d6b7b1499842ee15fd06f0753a7b

  • SHA1

    51ab26f7074d2836ea4e1c3b9f0a9e8eb6b57929

  • SHA256

    1046455f39dbe56dc8cc160ebc53b5b32315021af4a871c06235a5257e02f123

  • SHA512

    6023ed14d7abdbcd734050ba46162024fd7b39eddad5973e7bdf5de7b1bdc233822c1a4f6027b99f3cebafeb46a41c5fdc82c693beaaa335065316cfdb382852

  • SSDEEP

    12288:NyqF7UsDy+vMCt3kzBXDanOmitbih4Lb/aUIYfa7N2NZiuEQDFFAQSQy4At:NJF0UD3kNTcJhmzPZWwAtQy4A

  Score

  10^/10

  formbooks8gwratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2