Extracted

• • Target

    New RFQ 6000333264 (K0060-01).exe

  • Size

    1.0MB

  • MD5

    01202dc54836c255eb5d901d3641e786

  • SHA1

    60fdbb2aab5637e9b205a95c2940be264e07ca9f

  • SHA256

    6262299f2c4308cc3f69f8e038d68cefb86f7acb0b718d1fe9416244c80b5956

  • SHA512

    a95209c85deb8f971883ceea25c2cba9d06bb9d0a0d3141383ff7ef42ad767cc75beb366d5806d0cff62fe63a5079e4e9bfb68f58334ec5cee2de89c6c867b0c

  • SSDEEP

    24576:TPxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxNussC5YTy3b:hYTqEpxnhjiTFdj

  Score

  10^/10

  formbookji99discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2