Extracted

• • Target
    Listar pedido nuevo.exe
  • Size 699KB
  • SHA256 ab529f4c00e85413f18a544ab0bf9d8a4f5803d8ac497c0a9ccbcf38d17662fa
  • MD5 f28bb3711be3e8a5281d28fc795ec5b0
  • SHA1 85981c13f7d39dac047c8046be3241bddaeabe17
  • SHA512 ad1c8eaf2dc779c1b6518f31053f5e0cf8cb8d2572f66a065191fd91312025094f64b29e0b671b238c113eadbc75e69230f7b9eaf631629e21e21d046e6ed0a3
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbook3nopratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2