Extracted

• • Target

    Purchase Order.Pdf.exe

  • Size

    984KB

  • MD5

    6677a05c9b05d917b8654308183f9c5b

  • SHA1

    6c7189656dfcdfb04298ae60b80a350d17100f5a

  • SHA256

    b5c47964271578c767ebb7c3bfee10cda45464043d6e2879408f138da8031cf4

  • SHA512

    2f8586af3a89fd200a4fc616f7db898c5199afd7d224144628ea9c80d1e22567507eefffa4eea5da20598c3d926a02d595fee69439623d252d35d9ddceef42dd

  Score

  10^/10

  formbookratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2