Extracted

• • Target
    PO.exe
  • Size 1010KB
  • SHA256 4e7de7114cb5947cee9d0f5fa60f4ad2be8db68364a4f8f4b1a6ca4f5fe1a4ee
  • MD5 7728a2ffa228bb64178f05aac148f0f0
  • SHA1 76e1d21baa9cf2fa10118ad562b04ae1574acd0e
  • SHA512 aa8b14605e993b7351bfffac5cbfbfbf2440b25d297a853ff20b6f2445159ec63c028bcc7a1a175526479bbbbd8833afdf70988b2b0a8e5a97aafc1ebe19a723
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookodseratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2