Extracted

• • Target
    u prilogu je popis narudzbenica.exe
  • Size 1.0MB
  • SHA256 4ed75b8466a537951e39fcf6a8a024701d41c6ff3be98153dcc81dbff6a75756
  • MD5 f827aab7bbb871e026de55c9884c7986
  • SHA1 dc4c11b36add611aee52a751e1f2aad8246da3d5
  • SHA512 54fcc300037d6bb87b283d6073127dd2f1e07ce389c2cf2d97635507be1f05eb4d7dc6348e11d886aa9f3339b93ff58c2d62e3d97dd9bcc13f60eef7d8efa6e5
  • MD5 SHA1 SHA512

  Score

  10^/10

  persistenceformbook3nopratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2