Extracted

• • Target
    DHL AWB TRACKING DETAILS.exe
  • Size 270KB
  • SHA256 e22a659b73048b31aba79fce8de22ddd5a287494b763fec8d5779869dfebbf31
  • MD5 b1ba43fe92be78c47d56f06890a5a37d
  • SHA1 dfe5cbcfb9d2f7800091cbf2ce67b45e9dbdd1c7
  • SHA512 2764c15a021df84cfcd0ffef88c16fe90866a30256aa589ac64924122ae8ad523f0100aff29f0ec0fbcc93518afb6a69594fbf4d3ce9398bdc5bdbf630270627
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooka34bratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2