Extracted

• • Target

    tmp

  • Size

    880KB

  • MD5

    7a0e96f78e83a1d55e045972883b04d0

  • SHA1

    33e82a9963397ebd4c786a8f62a5b464899f6929

  • SHA256

    79df449dc86d423ea6b59361b7bc839efd8149bf49f138540327d9e94ec89733

  • SHA512

    81e1d33bb133073f8a6349630693c11a44f63deb0b6cafef8e4d4eea58da9db6b981e3c6c5d4f42436c05ce5c0859faeea2ba6166774674000ad9183e71ab62c

  • SSDEEP

    12288:bCRjG9rD4sbdehUG0CrkDPhaoh+s3dHzqm0wcas/:DD4KXhC6aq1qm

  Score

  10^/10

  formbooks8gwratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2