Extracted

• • Target
    ScanPIX.exe
  • Size 451KB
  • SHA256 4cc5a0fb10d6235a197da2d08df9af6afae59ceaffb0c7054cfb087eb5c039b6
  • MD5 281ff1b7ed1ab5042a4dc5f27922f945
  • SHA1 b26bdf9877ef39211331e75119cdc7c6a1386aa1
  • SHA512 c22ab92aa92b98a06ef48b074cf4ee5450618f1b364637958549ae8c7e19ab06510ec01c1ae066faea9ba1fed7296a87c9407e74781c66d6b38e34db6e42c2f8
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookb3n1ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2