Extracted

• • Target
    bankzx.exe
  • Size 755KB
  • SHA256 7024147e75938acd54b804df172c63b57c794e1980632c5f8190ae1e9d0da82a
  • MD5 feab1e0f9083ac203b6e7741b470bf8c
  • SHA1 0972d90e8ceb80630af2c7e5add7ede9d3e01166
  • SHA512 f0366deb4f1aa199da82dab78eba9fb2fd354a706c4ec678f717cf2d48d230c2082d44045824b06ebdd219de6b49053f19c354f52cc33a7632b6464b5eb80bd5
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookbcktratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2