Extracted

• • Target
    ARRIVAL NOTICE MAERSK_PDF.exe
  • Size 595KB
  • SHA256 b66060a214c372ff66b8917fee39b5cb6c82972cf7cdfcd64b9ae4b7b7e01bf7
  • MD5 071617718b519cc261cfe334db421651
  • SHA1 348b512736a26efd19d9969663cf7f86b2f21fad
  • SHA512 414c8bef1ff196e206e7cdf7586d3d3fcb46e56e8e3f496695e7aaf9acf94797c6c939dc4c5b56e064f90e12fde1cf35885e1b71e9c5041e04f293efb3ef5781
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooks0vcratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2