Extracted

• • Target
    URGENT REGUEST.exe
  • Size 746KB
  • SHA256 338c24b4e755ad15fa3fba95c2a4df09d8fe2aa343b13dc8d5506013ba8bb94a
  • MD5 059add6a1cb1b16bc455af6686fb5b39
  • SHA1 d40346d507ac935ffba292b9585fc156a20adb84
  • SHA512 b578c2fae2607297a037d87d7feea424c21a0505342b5425604d2bb1d67f35837c9fef054733d62ecd8421e10bf47d0bf7585859a10754a50aaa47518d015003
  • SSDEEP 12288:rKJ1TC6YN1P1+70pKXQlIj5g15bAa9pA0nRd+9d3O+mJGUxgACYZ4M10Nvg+aMFt:W75g1hAaI0ubmJnjh0NWGu
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookm82ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2