Extracted

• • Target

    invoice Ceylan 49.600€.exe

  • Size

    352KB

  • MD5

    74f87a533471eaa7719df1d9b0593c2a

  • SHA1

    77a20802e1e2db283ddf605a818372a72b0d8e26

  • SHA256

    851b20d33b8210f3d20ab4694011a0858eeb745e248a768c1e4c214efb59464b

  • SHA512

    a65587fa689531ff0d9da0c24ed9fb01adc986353491b6cb65773c66c7d5bf3773f8ae7c87ca4e2485da442c815722cdf5633e425693a8ace5f888744c868438

  • SSDEEP

    6144:uHKk9IMkhBBLK5F//cVXX2fbi5PQAWH8m11H1OiBSb5iUmkyvYbMNXTUEAp4Ds:uqsSBe3aW+oAb4bHqkTk4YQdUEA

  Score

  10^/10

  formbookcl8kdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2