Extracted

• • Target

    c5066450d674e2d7729d0acb5d3b571c948064c68bf82efc27497b56ddfb562d

  • Size

    732KB

  • MD5

    3374b87be5da25a09046d0b59ccc34c7

  • SHA1

    4bef0bfa8de1d50a3804f3af6394673fbe2cf81a

  • SHA256

    c5066450d674e2d7729d0acb5d3b571c948064c68bf82efc27497b56ddfb562d

  • SHA512

    92cca738e000d7bef12847babfea8e14b5f2b5122d208236ed1ec9d1ede984a91620371fbb5d7bd60d11c4477140e4afc5e9b068d8ae63b87915364445f988b5

  • SSDEEP

    12288:jwluhmomPZefCJBhaDUA7UAQ1PSxbUYW+DceP2NObN4VEsjJGPtqvyuv/m:eomxiiBhaDUAFQ1qazU5uUXvQF3m

  Score

  10^/10

  formbookpgntratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1