Extracted

• • Target

    New Order.exe

  • Size

    856KB

  • MD5

    7d8cdf3c58c00c596080b3f50f090ab5

  • SHA1

    558c0dd0071f4875d7f74a19106ff06774ac30b9

  • SHA256

    c9caca736c11e851b592f24322879f830096ef056283ab000c73fea48642278b

  • SHA512

    273e806c9463f844d60e861e454d48e6bd9adc0a552c476485d61acf89a3669b22986d404d7f9d89791f7cf4eb5b149acbdeaca14b8164b523cf62ffa8d5424e

  • SSDEEP

    24576:MHCtn9BoO/NtSQlQXDAlfSX6wnj+V9ClyTS666jDgs1b5/:z9KEpwzG8Lz6vgsD

  Score

  10^/10

  formbookd03sratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2