Extracted

• • Target

    YENİ SATIN ALMA SİPARİŞİ.exe

  • Size

    591KB

  • MD5

    1386e264b4ac1e8af6732b410f9166bb

  • SHA1

    3a2db66eeade8d4f99bc2960f647376d3f8fc602

  • SHA256

    75af305b8b64ee6b85b75060ea2d37053f9c4e87636445619cd132752ae15bb0

  • SHA512

    52e6c8b5530c5335014eea8c8f853f0a07d5dea49425a79e9406ed577525eaa315d8eb70a6996f2da530c5df7ca4d83dea821ee125839d2d0e8deffd8213f048

  • SSDEEP

    12288:i9pR1wbM2fzodEEsFsHVrLEK8ceyHYncKvrfaqpOL6PWsLUwDt7mjRe5had9Tgee:iTR1cOEHFsHV3HpHYnc4j/O+PnX

  Score

  10^/10

  formbookgs25discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2