Extracted

• • Target
    1fd18d12f95ae72da27cab03c5136f86
  • Size 764KB
  • SHA256 a6fc3d54528af98d4e971543db7f11f891d08269e288ad6822959c0a47665609
  • MD5 1fd18d12f95ae72da27cab03c5136f86
  • SHA1 f8c231644d814b1bb2121c6b7b739733aef39ee8
  • SHA512 d0efbe68650c2fdaf1dd6baf9f234aa6e6dcef085e23a88d511e48c5a034b88197494577540299eb252ff01b770bd5dd7c9c3ed95b30c8c61119808c0d28e0d6
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookp0t9ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2