Extracted

• • Target
    obizx.exe
  • Size 1019KB
  • SHA256 dfbb8dc13848a4763fddee0be94415ef938755656c54e3f151995e2d50f251dc
  • MD5 5ed8f58873e6537bc9a5bd97d18425b9
  • SHA1 8e3eefb9a9ee6759ad96325971aaf54d9cf98575
  • SHA512 5cfa1b6266f1f029c43f921c136e17070f54857a80369faba35d08ab226ec4eefc80b6bae0504588bf9943e8772d11575cb80861826033f88e62b33c31af53ea
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookfkt8ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2