Extracted

• • Target
    6e2d67b23e4bc268bbf9c83e15dc4154
  • Size 508KB
  • SHA256 90c16547e527be04c7fbea515f8dcea9f00353bf4394ecd45f891ab07085b575
  • MD5 6e2d67b23e4bc268bbf9c83e15dc4154
  • SHA1 da9bf145c66812e148fb70f1b36badabd9aa4989
  • SHA512 d2b62e64f545cc502e6b69bf51ea6b1db61a649b2004e10c50af266a5031859e268bec6783430af208c3ac8d61e7775ec808146038e86b44761d8e84d2888621
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooks4s9ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2