Extracted

• • Target
    Potvrda narudzbe u prilogu.exe
  • Size 1001KB
  • SHA256 fe6bd626fd98e3c0e4a2c350e5d927398e22e7731e7c2e1f31bc02181735c4e0
  • MD5 1708ec34ff4cd862e935fec79966887b
  • SHA1 79ea76f3939a052e58ca214b839a7c5431c42cb0
  • SHA512 8ab1d48386eab45c72a3de79a9f28a9502f60928dac03c41e20af1d686a081ada66a78372d47242535308bbe8bea17ccd1765c560a8343ea9a056eb503ff1cb5
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookbc3spersistenceratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2