Extracted

• • Target
    obizx.exe
  • Size 884KB
  • SHA256 6ecfdff224175dade2cbf63719974b5335c1a81cf787142681163ddf882ce00e
  • MD5 bb4bd9df1d18ee2ce11500789a4ea825
  • SHA1 4e3f76d79d8c299e35199c8d251c97e954a4da2e
  • SHA512 465c0f18a309a09774a9b19672de5b0e12935440cb1be164e54c4bf3db9ef1e24c306973fffaa7a70c3637772abab9f27f9409d7a33608abeede7a36033f6e6d
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooko36aratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2