Extracted

• • Target

    new.exe

  • Size

    601KB

  • MD5

    867122eba50577eccdc2baadb512178e

  • SHA1

    8eaef52def03a02d820a40de9d489db953b60853

  • SHA256

    2dac9bdaba5c690cfd8294096757b5a80607321dc364080337a0237fa8388f17

  • SHA512

    611c8dc9bfa0fbcc655e268fd18f1978667bbfd16fa7840c539ec58a5ccb6d969218334f9dfa6827d696cfd9dd23a6e27c0d7578a9ace444160e4634ccbb8bfc

  • SSDEEP

    12288:nc/FuT/euHB93Z5xeOwIqFPkkfd1R1PsSMWDEt:YuLNh1rxiHPLL7h0

  Score

  10^/10

  formbookm82ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2