Extracted

• • Target
    QUOTATION PDF_SCAN_COPY.exe
  • Size 523KB
  • SHA256 35147128936c2e79548e5c0a2bbd70cd5a29c1b01dfa1ac2515fa5becb7efa6d
  • MD5 5e9af5b2056e4da639a9459e3b36193c
  • SHA1 b779402e9a6ecbbef6b68817814991bbcade12df
  • SHA512 4f293bab428aeead9c4b0a411a9d0674bebd87cf89d92f2aa0b1ffc4d287d96b859365453f21040abc7b5dd4f452f52ed98661b8c16624d9915d4c40ecfe15ea
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookn2t4ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2