Extracted

• • Target
    847b832c2f0e00b943760f330c60e08a
  • Size 336KB
  • SHA256 0736da1f42878cc4630f0b855fb638e76989fc53513fac93061cfdd49f9c94cf
  • MD5 847b832c2f0e00b943760f330c60e08a
  • SHA1 0c62e3894d7f516370faba5951021657ffdb32e1
  • SHA512 5cdaabb4f5007b13f32360b210fef05ac372cddd6f196dca3c8a88c73fb551c8fe1a433d9a93d9127ecde8da3d781014c5c3aaa66fe960b01e53deb851db3cc0
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookby73ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2