Extracted

• • Target

    Purchase Order No. 4502717956.exe

  • Size

    636KB

  • MD5

    f0d59737a03d771cef9ac6fee3d09943

  • SHA1

    d517eab4a14ce87a8d0a551ca3d046145e739dd5

  • SHA256

    d1dd1f80a7b08c0b8ee7c3067df3d35dadc6af79b02761ccf70dfcaa53f76cd7

  • SHA512

    318b662f312298d5eb8dd6345ad6c96c58bb8fc818268091646d049414e7df96585eaccbd06220beb635725ca25c15f3b4ab7dae06a354054410cdbeb8beed53

  • SSDEEP

    12288:YTczpbKbfu90F4t72M6/nFo0B+aFo7keY528R+:YgFbKie2x4/kZ7kr

  Score

  10^/10

  formbooksnkyratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2