Extracted

• • Target
    uu5009125.exe
  • Size 256KB
  • SHA256 6e025a1d72e2abfb9c0fb6c945d3fcdbe2124c5d68d8f5fb09b8389bc30f799e
  • MD5 d1f76ed4210b6bbbf232271b8b198133
  • SHA1 a8407cfa0da5ecffdfeeb22a824f4e9fa368249e
  • SHA512 de396811bc499eb12b2f02d79262d0dc4962d8e96a260ba493a70883edf79261c540709b5f957bea853bd810ba1934a3c9ca623a10726d1648cb1bd4a7093138
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookrv9nratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2