Extracted

• • Target

    Advice Ref SCA1Sv2.exe

  • Size

    1.0MB

  • MD5

    36cffbbe00ff9dd2a5c813d43dc2749b

  • SHA1

    80a003e052f3cdc9bd10803882c198684bff8574

  • SHA256

    97a6db96fa0467a8cbe068fe3b09b0c03c2be85e2902503464e3af90e4e80af1

  • SHA512

    b417c23df1a8c0fa2860d59d6886230b4648f66eb4ba269cc2514570a0f8b3bbee4cd653b0543ef3b07a02b6c52c657665303add260b6c1093e277a990ba089e

  • SSDEEP

    12288:WU2EIn2uWBQmER9Ai2flfLO/caYVT/XG4Vcfe+y/qv2q7KqRmZ4dUpkD0bxMMJPc:WRWBQLKNkcfvHcfe+y/qvjG7xMMJ1q

  Score

  10^/10

  formbook8ch8ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2