Extracted

• • Target
    6e87bd4f5e2e5ad4460f4b47bed71542.exe
  • Size 1.1MB
  • SHA256 1b4b34f61e8c7544cd51784d30da4e21134bda0b2e8c23ea740ca83cab04e58a
  • MD5 6e87bd4f5e2e5ad4460f4b47bed71542
  • SHA1 a530b77603c68c5e589e130b35b54852220eafeb
  • SHA512 d96d41ba86846ddea7d1ac1e294764cab298692a8d7c8e4490eadbe617fd2d606b59c99228d861e9df9bb8d2ca7e7f4d15dde0494f01f76ed24bb5e96ce7581e
  • SSDEEP 24576:9kU09QXheNf7W/iq94EzhKWpWpqZSiqagaOtY:pXheNfyaahzLzns
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookg2fgratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2