Extracted

• • Target
    Hoja de orden de compra.pdf.exe
  • Size 377KB
  • SHA256 bf28fead8ec14ec9e464574a4dd67fec82af54f203787632e55e7899293666df
  • MD5 4098ef762839010932f035a1a3737c42
  • SHA1 d277550aacc1328807d3dcddaf9cdaa5c88296c0
  • SHA512 11dfdfc717f59e57eb4e10d667292edd57667777e46de4d031c7ebdc8dca3e6691052b98456cf262aae494c040335c2da7032f1fc80e5b87977cb0abfbc88916
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookdv9nratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2