Extracted

• • Target
    45ac3d1717d900667b3af52712d9e422.exe
  • Size 1.0MB
  • SHA256 5bdac8b30125850db84f9c3dceee1dfbbbc67e1ca5501cf678e14b835f38000c
  • MD5 45ac3d1717d900667b3af52712d9e422
  • SHA1 592f7218a56d4419fca8e6413ba57007837235a2
  • SHA512 5093dff0692e4df4cda7eb847f6fd455b180c2a5a3d237384e45c460add692735a312675a20bde5a342efeda63a101ae01715c8dd5d087979afb93199df1e4b1
  • SSDEEP 24576:1YG4Rfj13MK4XjjSIhDXfmxGeEzffrm7:1YbRJMBSIhDvmADff2
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookg2fgratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2