Extracted

• • Target
    PAN OCEAN CO LTD-pdf.exe
  • Size 505KB
  • SHA256 bcba0056c80d1a5c320dd74fea9caba51cc2f41c4d05215df1ab825a5ca10de4
  • MD5 bbe4df3ac05fc6d8da76097b48671892
  • SHA1 dac9a8db9bc9cb91c0977b4477e62ffa77f3969d
  • SHA512 fd090c93491f62cca7ee47abf92dba5425f9933e6291fbd4b63cbf725671f524f0b3f4c2ad7e0863591bd91eee903168220838d0027ffba3ee0b39ec32c1f648
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookm17yratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2