Extracted

• • Target
    rRecibodetransferenciadepago20240214Bs8508500.exe
  • Size 686KB
  • SHA256 4018310881b6b77db2e97b400ecee07ca40d65d72f604f8db0f85b8815d3c94e
  • MD5 f3d96544c9e16715a37486f2747a0d38
  • SHA1 1ffef86f7e5857965bce926ece4199547f636c47
  • SHA512 28242e8434ef1608cedd975fa6df540515ba5c1956248e81d8be89368aa85f9cc048760132a2765438dfff9baf87c6754080cfc785b8b179a7550321828e2772
  • SSDEEP 12288:qCBDRaWTYOEvazBIjYBMsijXJDe4D44444MVieQ6uJ9JUFfCjpm/5uTsU2Z9BmQ4:/o3tVieQZJUxCjEBssUyBmQdVx4Cr+
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookpz08ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2