Extracted

• • Target

    d39ec2fb7fa07bb6886173571262d2324d96b6e879ccc4f2cea46ece183e576a

  • Size

    812KB

  • MD5

    8306a90a10e3fc42341768b333d3a957

  • SHA1

    05bb69bb01e6aeb6b92bf09ad6ce194b4f2e748c

  • SHA256

    d39ec2fb7fa07bb6886173571262d2324d96b6e879ccc4f2cea46ece183e576a

  • SHA512

    99f7eaec1a895ef6933cd967d85d75dc36d3bd2b05a15fe2fa0e95558df8e58522fed4855e8e59948bfdece73ab9b957f68a58a47fffb8435656054922a4a7df

  • SSDEEP

    12288:65MTdFUoSsmtiK5oyZ3+cGwkUp/0fciw99blihfJGJVR53squN:F1+FovcKLgbl2G1aLN

  Score

  10^/10

  formbookif60discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2