Extracted

• • Target
    bobb4567.exe
  • Size 245KB
  • SHA256 9598f7ebeef58e063e6e5de7da5ea2775991628d11c4fae3e3e2854fa22065eb
  • MD5 90825728992d0ef937e2523370e34b31
  • SHA1 7b9a3d06e10d3ccb32a8be5a98ec253bbc0bdebf
  • SHA512 dc180827a8ba8f24dbf20f38091e1bee6c96776399733bf6519e567c0072ae5907abeaeea5873630a4a9057ec34370bbee47042c7b7e5d4e143ac6cac105f370
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2