Extracted

• • Target
    Quote.exe
  • Size 378KB
  • SHA256 f306c809d900329d4f788b9ecf6c1771a6cdfdcaf549d257fc7187955a8a610c
  • MD5 857037f2a3a69697f6343c44ae4da41a
  • SHA1 19b314073cd3759bd03fa55496c4edce608e0480
  • SHA512 378b794ad0cf3e06d2c0fb860b4db24bddcffa658b1e4763c334b258406ffd085b29ff0e20ae4d32b4192f69779fc440fec9b6e63c19f646625c14bf3f67d214
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookp3mpratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2