Extracted

• • Target

    file.exe

  • Size

    1.1MB

  • MD5

    6a48cce91cb89eb4405f9ba2c2124cd6

  • SHA1

    5de7e1fd1eac0078123e4c9b63f11ce6d0527152

  • SHA256

    46c11187b0eeba2ad55a36d97fc897cd2612a4cdf491405826346092af6e261e

  • SHA512

    bc95a9a76dd49db6669bf9ccb2acbf23db77fd4f774eca37483768ef87b6319c8525b6acdd67ceb82fad17fcfa52f6c445367aa525775a422095a5fa20d65d34

  • SSDEEP

    24576:szq5gh/aw3XyilFIUM7jP9o71sURfUHvB32Dz:szqKh/d3Xy8FIUMvPIXfkU

  Score

  10^/10

  formbookdcn0ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2