Extracted

• • Target
    ORDER INQUIRY_pdf.exe
  • Size 391KB
  • SHA256 2388aba5e29792fc92af726882eb073d8d896640df9926d0dcd7565e2ee41cce
  • MD5 8be97a587d0f0da89cb30586ce07ff54
  • SHA1 08b8c506fdb5e882de20e88366aaa2a21522c874
  • SHA512 d4b9bb1be0b2d79ccd23fc111c070dba11a46d75eed28dc520d81e7a184b92797c9005229b54cfa6112c10b67e58b0141624aa8b518c8b070bd9c744dcca8f86
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooke0l9ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2