Extracted

• • Target
    rocee.exe
  • Size 289KB
  • SHA256 b1623f58bfe1b81afd809e8b60a395ba2bcbe9c15b67ccb1938bd21172a586ba
  • MD5 fa7ae8aacdae5c29240544a7d098b43f
  • SHA1 911b39ab19a80ba61b0b71dffcdc29bc27552828
  • SHA512 a8726e55f8817ca6cc425501ea1bfc225464c219675ae7f06e7e14b9a26438f6f4ea867830df34c5207c55460e48d7ef7181bd6ea53a2278383edd3782400728
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookr1e3ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2