Extracted

• • Target
    ORDER REQUEST, ISO, TAX DOC.COMPANY DOC.exe
  • Size 945KB
  • SHA256 a942ff27c44b844b9b4b6c77a43fc5d454c009c8dc649cd381ca7d3a9e23792b
  • MD5 0e18bbfd2b516bf6106521cef3b65588
  • SHA1 59a39ce422b9b68304c28106be82db90e27ab80c
  • SHA512 f56383643d2c1a1735e8dd164ac029bc85adab21d3b3e086804c702e96516e8fcabf9cb5bf9afc5d493f50e2cb9051955cb5421fa9b78f20bf9cbc9381f5e0a1
  • SSDEEP 12288:/wZ5xznJ2uYPF2ea/b7bdWvAHMZQRp8Kf0oGzGrpja528wObl36hl0ZPPV+Vz:oIv/a/b7bdWImk8KfJmkncoleH+z
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbook5pdfratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2