Extracted

• • Target
    Scan93880.exe
  • Size 433KB
  • SHA256 a97ce8a55897b2f476c343a3cb5234e94848cdb3a7a815bb1c31c48dfaf794b7
  • MD5 ae15e5fb3e3dc9f1586688d375b83a6d
  • SHA1 bc7622e1a2785822463a043ed965f8121d6e2c1c
  • SHA512 6c74797fc399a1dba48d4a14e785e5bc714b8c5a0f9b21593f9f3bbd0b9a0c3a9b380aebfdd132d772972d287339dbee9106772f0c4a00ee15f9e6df535c6fd9
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookmh43ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2