Extracted

• • Target
    AWN#INVOICE2021119.PDF.exe
  • Size 371KB
  • SHA256 2fe9760a9c5fb15b569a9003d41211e35871e52e8ac829a587ddb3e48a52a8bc
  • MD5 a260cece98fd48c716cd50fceb1e9870
  • SHA1 72ccc0363478c9949e7cee726ed4e733138a5e1e
  • SHA512 e5ecf3748d2376d1e2d2a102e46e11c7fbaa19d82a4cfd1a7ca47b865f9d0f808f66d35f37c308ac0afa6479caaefa1b13244571992d0ece397e9e18ac35b43c
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookgr1cratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2