Extracted

• • Target
    Order 0091.com
  • Size 492KB
  • SHA256 9d8faf70b5732a7994ea4a5b49e0ee5ada032b0a03e2048de8ffe6da4e66c412
  • MD5 57e95002c65e37c937636d6a802ed998
  • SHA1 347f51fc921f8a64b3134e2e7c6cb4ae35f991f6
  • SHA512 5af180e87a11a92345f85834b39eda2beb2843e7b9144b8f61ca69eb98064525b58a459685f612a312ea10ce09c331b28371607c2e9e602cbc5efab1f331413a
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookdn7rratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2