Extracted

• • Target
    S.O.A.exe
  • Size 813KB
  • SHA256 e6cb9330e6bbd16bdd58aac76070200e17389a45c4aead703d4ab970038ff8a2
  • MD5 10f79865e6d977fa0d9f5d4a12ac7fac
  • SHA1 c05d245928e4c06f1591187d595786ffcb57584a
  • SHA512 5ba202c0fcf9dbffd0dbf3a1310978469c55a764876eddc2d02e66f01e707890de510a73595d43cf1f6b7c7769b4e2a756abe75d48f805aae34d78d8709b500c
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooksnr6ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2