Extracted

• • Target
    SecuriteInfo.com.W32.AIDetectNet.01.2776.16732
  • Size 480KB
  • SHA256 d717d448e3430e4f325ff677e5d45ebe7e17ecaf6324f9aff852a5ed271c0dfc
  • MD5 562d98cd8456593c0b3e5a7e98c36371
  • SHA1 720935c1d22588b3b0bace621ac70a8e78691bad
  • SHA512 84106f0856f950abfe578c814406b395e3d30bed74eed518d31bd1e4cdb48772333060a5a14bc652c9b771e8bfe8ca0897534ab7d2244d70f80359b1cfff7a3f
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookp07yratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2