Extracted

• • Target

    dllhost.exe

  • Size

    1.4MB

  • MD5

    bb367436118b3298affddea50440ac12

  • SHA1

    b2b8d261784991e3c14c6577447362cb6d72634c

  • SHA256

    37f6df44b9dd38408fe5682c6d660eceb04a2915b3420576afce05bf3076bc01

  • SHA512

    f3549647a3e17bf9ca84e67e40311c3906e9b822f25567a434f8ae7ef737d0a10057ff5812fb293f4d2375b1da15b14458b33c3bcff92eb3599512757c1d638d

  Score

  10^/10

  formbookkzk9ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2