Extracted

• • Target
    maxf.exe
  • Size 295KB
  • SHA256 99e25501d1c736865e766fe4e347cda8817f4005be1d7b0c336451b89be71ed2
  • MD5 00f6b12eb5e9f063938b604f05a71a5a
  • SHA1 5a62549b2a9083e653a7e9ea9d82cba8871c62ae
  • SHA512 d20f6ef4d11210bf3048fc144901afa37981063915ea52812d193c277230b11cfdd86e5e98246476054f4ea012c8e7a7e2bf5d0623ec41c959aaf628a167aed6
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookdyh6ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2