Extracted

• • Target

    altek inquiry_06122022.exe

  • Size

    240KB

  • MD5

    57e28993ff25e296f1671cf08842bc72

  • SHA1

    789a67ffbbfbdbd722371580a26f6bb39f86124f

  • SHA256

    ef183500f8b2a320013adb7f7594aaf7562d43cfd17026f8c7a4cd26a243965a

  • SHA512

    76820c62bb5f5ce2cbfcf98aaa8b6f2d1c3acb28aeb972b7039ce63e4bb0072867425477bf80ae09c4a11c1c14257d94a40d666aec782f01c4781ec1235d046c

  • SSDEEP

    6144:xBnYpliv3Ux2/jeM5C4fR99KWb8YPo9hUCCkPBByiL:UpEv3yxKFPBkP3yiL

  Score

  10^/10

  formbookm5oeratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2