Extracted

• • Target
    aguerozx.exe
  • Size 758KB
  • SHA256 3dceeaa794d1b8b67ba67c57820ba13f8078801c589747426b0562b5ebf411ca
  • MD5 523cc9d41948c75931c2c280576635af
  • SHA1 55dc2cc4f50345f8826e0a5e7ffa54304800f1b3
  • SHA512 044d64cc47c3c986703d1fe8137ee1e60b6d64583c5df7cc1ed576cb6125d2d48e5fd6c94006aabcdc8b074d8de836c85eaff0a70106da0535851514de5ae55f
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooka83rratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2