Extracted

• • Target
    Quote our new Urgent order_H7790432,pdf.exe
  • Size 522KB
  • SHA256 9ea2af324c0b6ab6493a82c59ba4f2aa56d94c5bc830f0e2b5a8288dc63747d4
  • MD5 1ba0190e7cc5a7bf451bd49dc640790b
  • SHA1 de3681aa88d1da98d328d18330e4cf60af688b78
  • SHA512 a1ff29652b7c0adf322b95650138a0b87a26f4766cae9a25b5376d746ba856e3ef423c3ffb18a419eb763317a46f2fe378fa495275986192a6985d47472c54fb
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookc1h5ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2