Extracted

• • Target
    Quote.exe
  • Size 425KB
  • SHA256 e7e96e3fcdf2d9539c750c66f509c8d9d8d9a68e0fa2d944464b4095df875fda
  • MD5 b640b0931f7fc701a5010b93675a2dee
  • SHA1 e6fb4b216a62f51cd43579994406722eef3b67dd
  • SHA512 783d47797c7379daf8a7169a4caf0be2e63d2ed1ec8d43d9aa3b5c7c748dc84735fe47ce298e0f1cf44c4f1ee54a3de52735b6e2202a2786afe4ea79a4d3ce29
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookp3mpratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2