Extracted

• • Target

    Nov objednvka pdf 4562021xxxx.exe

  • Size

    939KB

  • MD5

    6f3359516e6e034597b9a849a74c0e1b

  • SHA1

    2a9117841a02da3ff3bbc119098c401cef5eb462

  • SHA256

    501c9c6198b9d45adb224cddd57019dc2ec371e6b65b5522ea7e8b21dfda3255

  • SHA512

    98b4ceee4148801b4a503d2a753749c14413a396df85820ea777658f94241e9dbe8fecdca5611410e8f8f622597b17148d7f732d1f4efc5bdda2415b5eb0f9a1

  • SSDEEP

    24576:spzSrj/5tafURhnXamgGeQx6UFfX0RbiKboM:spzSrj/7afS1amgidFfk550M

  Score

  10^/10

  formbookmynddiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2