Extracted

• • Target
    Yeni Satinalma Sifarisi.exe
  • Size 792KB
  • SHA256 5145f1759e79b4d29641c6c604173b0bae2a3d7b156b49e8c267da63e0cd94d6
  • MD5 3c1181489ccff99bc9b8cda800381525
  • SHA1 cb466992514ba4541bb7776ce0fbdfa75840028e
  • SHA512 0bfaee9018cab7bde98116563875dcb1aeb95765b159e38d201d54daf114071de9bfc5a360ca79c994e3d73f5fc5b2b57193f0a384fac93dd959a9ff32cb6f56
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbook3nopratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2