Extracted

• • Target

    VESSEL_S_SPEC-BBN_SUPRA.exe

  • Size

    351KB

  • MD5

    359048b5dc3e27a1d81172b25d93d6b2

  • SHA1

    9efff8dfb886f8bf8fac3d354f674f92e80aa8fe

  • SHA256

    b48e1af2b9c183088065530dad02ce3b2d2a333e899017a34c1a817ed892eb73

  • SHA512

    0d80c670f0734ac145b1499900e7d03946cb69901499a51ae1db9397d5dbae17ffa9c5e4150a35fe40d37edb5b8b2cc910e63f252c2d9f5bc2e95572b0d8d192

  • SSDEEP

    6144:sh0f3Yw7yGailqh/WqbYjzA2MVu+ocixl5MgphAcy67gtgz4o2+2iOFn0pcccccI:Ss3Yw7yGJqYzAlVL8lnjPrgtg8ojF

  Score

  10^/10

  formbookermrratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2