Extracted

• • Target
    doc.exe
  • Size 1.0MB
  • SHA256 c08090499272c9eb85fa61570bfd62799b3c3bd1441b1a86f2720bd03a17dfd5
  • MD5 f351838b3712296ef57231dc2a375199
  • SHA1 90c89c8b8643533d5f4c68fbe8ac851739cc84b8
  • SHA512 2fe52110bfb424999930d50e614b491133a29521fd6dc8a2e4ed3e457a1ae50564eb887e507cfbfcec4bf5166bd8c96e9d6fc77e2de826beca62ce024b131dcd
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookld23ratspywarestealertrojansuricata

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2