Extracted

• • Target

    9c54fcbb8be190c5e9d17100f4c3ad49f8d3427608121d1a86b6402a98fd61daN

  • Size

    708KB

  • MD5

    72aab2ac97092702e3e5804e18306a50

  • SHA1

    080a4b05d7b760b97aca390ae818db83b02ad14b

  • SHA256

    9c54fcbb8be190c5e9d17100f4c3ad49f8d3427608121d1a86b6402a98fd61da

  • SHA512

    e1fcfe79903d292a21b1b7af9718bed828cab51accb499991db444e9eee205269dc58d26eae20cd9e416a23c261d8bd17d9b5b515be24421178bce8d1ddc0600

  • SSDEEP

    12288:OrzFejO/H4b3toyhFHKYpJ8fKLpl5k4DbF53e0IUFLLC6GQG8:OlAOvOoyhAYpJkip

  Score

  10^/10

  formbookmynddiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2