Extracted

• • Target

    3dd65f1a69d9bfc66ac90f94418e7038bb7716f55b2b75b2926a1e026ebaa093

  • Size

    1.1MB

  • MD5

    78c60cf7fbdfb30416050544a80ab48e

  • SHA1

    a3f2348dc1a1ad60f1cbdc269632da2b4245ac65

  • SHA256

    3dd65f1a69d9bfc66ac90f94418e7038bb7716f55b2b75b2926a1e026ebaa093

  • SHA512

    363a3637186a87a8f5beceec59e579b4ccae86f87ab5b3536ac5c0cfc49961e840a5f6de6bac567569a3aa1bcd280a1abac7ddcd102ba623cac8250f8868bdc0

  • SSDEEP

    24576:cL4LJWJYb9gCJysH0sF/xikvcKw7xWho8L64:dLJWJceIFJho+Z

  Score

  10^/10

  formbookwnoaratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2