Extracted

• • Target
    Novi popis narudzbenica nalazi se u privitku.exe
  • Size 583KB
  • SHA256 3ecf3d1df831abf769bbb4121101d9c2ed9c736dd19f8c8f2ce361443b018a96
  • MD5 c4cfb1228513722c5dc0948cd11d333d
  • SHA1 31768c5e304967bb5c49b77a6c1f1b73456dea55
  • SHA512 feb31277468c802a233df357e118a4b965fb746d1cc1348b5bbcf8bc27ee9e900b17069de880de05afae9abed1493aac22468fa1c4364111dce877078c99ee72
  • MD5 SHA1 SHA512

  Score

  10^/10

  suricataformbook3nopratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2