Extracted

• • Target

    2acc48ac59c4d56bd7ac05e52cf1117d

  • Size

    1.1MB

  • MD5

    2acc48ac59c4d56bd7ac05e52cf1117d

  • SHA1

    ebfd27d0fd630d2212934a92ed30d66035ab16ee

  • SHA256

    741e54e8d4c95d3a939bea610b4805e417a0662e17e5811aa72466d74f0fe9b4

  • SHA512

    fcf2b00192f268fa31a071bf10306399b3450abab81899be34d89f74528c57c1507cdd52d98938d57489d664b87a2660fa3152acee36cb52428249bb7fce63a0

  • SSDEEP

    24576:6lQ7oY8FYMblhBIgzqRDPzdzN543puwbmF:wQoyA1ZqrdKjm

  Score

  10^/10

  formbookodseratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2