Extracted

• • Target
    Tax payment invoice - Wednesday, December 8, 2021,pdf.exe
  • Size 379KB
  • SHA256 48077dbf8d6f3b0e5e1567690798b6cf960cd22636beb363ef46efb2acd4cd82
  • MD5 d2743841b5eb1e3999111b01dac0ac43
  • SHA1 84bbd3eed1015f47cf6a791595f5eb3a41be254d
  • SHA512 a0eb655c33a361bf4d602a5823d1fe885184bf085d8c325dc89cfd4e1302fa26d78e811afb730e90df498d931619a49a6d19dbb6ba6efaaeda432747a1ab82d4
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookc4chratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2