Extracted

• • Target

    NUEVA ORDEN DE COMPRA.exe

  • Size

    596KB

  • MD5

    1f64d20ee12dd6ce045decfcee3207ce

  • SHA1

    81ae1f4b15dc5100391851f2e9fc2390588b5f46

  • SHA256

    80c6293d18c38b686ea6ab60d134247f8d72553be2d20a305b94c78115227667

  • SHA512

    8422396ee0784ca38c48b0b9af272567d19c03e97dc3d61d4c80d95749852a3b28005d02a1303bff481563736dbcfeb81f1f439130ec4463634a36389ea19978

  • SSDEEP

    12288:2+QBzis4GSpgQIpjcwKdxAxMc++sdkzYSraEsl:2+YisgjwMdyxy+ckzDratl

  Score

  10^/10

  formbookcy01ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2