Extracted

• • Target
    00d8a629045b08414e1187dbe6419f03.exe
  • Size 571KB
  • SHA256 fb1ccc21ef84112ec41d904546fa6e35c0ee0ff48626b68dd2d1839f77a4b508
  • MD5 00d8a629045b08414e1187dbe6419f03
  • SHA1 00267a68aca660ecb495d136e43831ea503d18e4
  • SHA512 c1a219d8c2938fcdf04e8b7ab8949c44966a22430144e9dd5bc27999baec42bb4d238e8ac5747f51c1c24b1c483dba57f044bc95947f8823bfc37d33a1dc54c0
  • SSDEEP 12288:8FFZ6AlkCwA0oAYSaS0O16JMWqtzsAtq0pY+kmWqIVl:W61A3bSajOXh00pvhmV
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookg2fgratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2