Extracted

• • Target
    _SwiftPrint.exe
  • Size 660KB
  • SHA256 e939f80d2ea28d6033d761db82bfa2c235f0e2f2ca9552c6c5009c2a286bb483
  • MD5 42e4a06a9ebf7a59b5b27f232bf8b36c
  • SHA1 6517b110902b2d66f411ff20e554340be1984b9a
  • SHA512 0b3d4564460b496a2695da5d24da6c2273a0162dd2a685456df73887dc7686dfd173f06135e8f3c9250899741620a8f8d3b17981d42000954fd3a98fa5efa3c8
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookje16ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2