Extracted

• • Target

    ORDER NO VOL- 6542 335 22.exe

  • Size

    1.0MB

  • MD5

    d59478fd8ef62d1006e85001c3ac59f3

  • SHA1

    aaf63576f5f1f412547c51bee18f88deeb06d36a

  • SHA256

    af9c39c609e5cda424ed4cd2fbe7f32c0d9d2936754d41c098a7dec269c42fd2

  • SHA512

    7184b20f299cf019d9a8f260fc8fd135b7e5b558a4e4061b10f2930a80949aef67de2bd9293770585cef7a677fdacef69cbaa61a688905118c717d4ced98999c

  • SSDEEP

    24576:E1RcJw0mlJ5noiNiGLU8GXplgs8PErrmDgvqOR:Ezc6jnvQr8GQormDIjR

  Score

  10^/10

  formbooknquydiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2