Extracted

• • Target
    d39ec2fb7fa07bb6886173571262d2324d96b6e879ccc4f2cea46ece183e576a
  • Size 812KB
  • SHA256 d39ec2fb7fa07bb6886173571262d2324d96b6e879ccc4f2cea46ece183e576a
  • MD5 8306a90a10e3fc42341768b333d3a957
  • SHA1 05bb69bb01e6aeb6b92bf09ad6ce194b4f2e748c
  • SHA512 99f7eaec1a895ef6933cd967d85d75dc36d3bd2b05a15fe2fa0e95558df8e58522fed4855e8e59948bfdece73ab9b957f68a58a47fffb8435656054922a4a7df
  • SSDEEP 12288:65MTdFUoSsmtiK5oyZ3+cGwkUp/0fciw99blihfJGJVR53squN:F1+FovcKLgbl2G1aLN
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookif60discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2