Extracted

• • Target

    Ordem de Compra.exe

  • Size

    823KB

  • MD5

    bc14d13f1d7d4299cb07aff24b039b07

  • SHA1

    91d3595692f85beb86cbd70f89c0327c1484d423

  • SHA256

    03f5b9544b3bb2db290e54dfe203f425374d973ac225df52a7cb29adc7998726

  • SHA512

    85081d8863bdbaf8ea7f85f9e69f0c8ea9d7aa3c6bd3f144f421b6ef86302c6ce5a6dd96e87dc95e4b4d7e581ff969c1d98854f6d0b5963d67dcfbad9edf3a47

  • SSDEEP

    12288:hjLGEbvQe+5cZO6OCAq2iNoRLgIRLu8lVY+96xZXgOCxAumyVnQWiEyJTwVdRDJ9:hjt1KtL3lVYpxZXgOCxJHQttTwfN

  Score

  10^/10

  formbookfs8discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2