Extracted

• • Target
    SCAMPMT.EXE
  • Size 431KB
  • SHA256 138885bb6b68014d53469fa9ce85505960e780a2953c13d4bee23d87f0db1563
  • MD5 067e3e5b267e1c65a9e633ee3c3bd3d0
  • SHA1 3d0ef11080a29070a41f7b97c64cd04f45a147ee
  • SHA512 4487df8a859d6f2b40be64a7e516c9135eb703ac03fe694c297a241c6b710a3b84face067f2faac566f44d35a77be377b455c29e317b45baa3b6769564c67588
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookb3n1ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2