Extracted

• • Target
    ikenna.exe
  • Size 243KB
  • SHA256 bc3b273da5373209066dfd2c0e491802ed63ba76839e25cd1e50ca247af3c96b
  • MD5 0b117d9e4b5490cc16047ac4e88c39a1
  • SHA1 b51c280cc7dd2aa4c9c6359d3ba9af620435a4d0
  • SHA512 e48fa064d7e6ce417af49fbca27fc169693ebcab23b5eafd87c9a9470c1b1b133f087b6c5b148546cce19388d52bc85bcd4a1e7e5474ca52aba2933c5c641a73
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooki1a6ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2