Extracted

• • Target
    SOA invoice.exe
  • Size 922KB
  • SHA256 6b0af32dca1211680c0879e37e91f18fcb57f1e93dd54df4e0ed098efca7825e
  • MD5 6d782a7bdce2d6f9cb086f77aa27d4cd
  • SHA1 19adeaa2cc3413795759d85d38f0239a5b3dd2c1
  • SHA512 8ea10ebb27b54385a68b8dbbc043c57f8f85aff801aebe4c0d0b75778e3dd3281727a7d1a4c77cfd435cc2813c0f55a641c6f0bb89849b98ff489e924d4904a3
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookjdknratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2