Extracted

• • Target
    Documento de Orden de Compra de MOLDPLAST S L OC 1580070560.exe
  • Size 587KB
  • SHA256 446ff8a7bbf81d173be5d0a31738f87e2738af8312bc8f4aa4ca3b92b951fd3e
  • MD5 47600cdfe4f3f38d182f7f9d17e3d1b3
  • SHA1 07e2055d1c4b728063135c8345bef710751fdc01
  • SHA512 28e40d019b96e81ebb9ae440d52cb865cecfbeccc315ba0d2b48433fe679c1511380b44123ce9c50d2caa2d427499f9ccabd5c5e3dee4f06c3ad2bff3ee60874
  • SSDEEP 12288:D+BL5sKJPs1e2O2Fi8jrnT0BL3/lRjmbxO7dE:6dKEj2JiCnIBLPlRUO
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookpz08ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2