Extracted

• • Target
    45f07d4fc57fe3ee1590d8e3f82bf0cab7dfd4ed7a69702b3af062b18c50f721.exe
  • Size 947KB
  • SHA256 45f07d4fc57fe3ee1590d8e3f82bf0cab7dfd4ed7a69702b3af062b18c50f721
  • MD5 f9d587f8b5b4915018631e9d1b656530
  • SHA1 1e919ef7383cf3bb259e5579570543fa631d97b4
  • SHA512 dc7f93f9238e4cf45354665b214c4ddd312738a2bf21a4ba1619a54baac29d05c19adc4f58341a8dff03211e9c3a16d96e0ecfff01da6b6e7e7b1be03eccfea1
  • SSDEEP 24576:hNy1l9ShZmBHmsLzeLSlqOD2ojLOccy37SQ1:K13ShSHzL8ODnLOcce+Q
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooka24eratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2