Extracted

• • Target
    Ziraat Bankasi Swift Mesaji.exe
  • Size 715KB
  • SHA256 0f91e080cdc1fbe9586f0da5ac31afe72b931cf71d3b907495687316dfb82a3d
  • MD5 2bb1c9b566c1e5e0b26cecffaad6b859
  • SHA1 a8ca837b18a458c7b77d5952dfbbd6640d2ea63f
  • SHA512 c1fbecd612ab283087d047a3cf0794ef194e1affb3e1505e246eb5235e8a8e294f8214013c03f06886f487e4d99e6b4b3557f893a00c416a4626a78b4e51bc6a
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookas31ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2