Extracted

• • Target
    3e19b57f827e4d5df5e09cd5cc115249
  • Size 796KB
  • SHA256 dc8c2ca84a7c5468cfb7b6bf59396e0333c8d145dc08fd1efbbebd9fa0082dd7
  • MD5 3e19b57f827e4d5df5e09cd5cc115249
  • SHA1 01bbbbc3a4f304dbe65e5331f79baa0705f4fb7b
  • SHA512 21bab69caad254679e07609e35b942cdb55e332effc8c33bdd26cd14d890805e8626b15361f86c408a98ffff70f2b3a02b44352745bd6c7016d20f316a16299a
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookg2fgpersistenceratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2