Extracted

• • Target
    Proforma Invoice.exe
  • Size 567KB
  • SHA256 e6fff69c658eefdd7ba7deba86d09717b77aece9c9ca1a6e980f58ad3e2de86d
  • MD5 c33979491336e67c6693a108b528ba2b
  • SHA1 212a3d707f5df8eec53adafb914a953acaf5bbf7
  • SHA512 f407aa17103f6e07df44f1394bb421c9c6d3897b9ac068ddd3d4bdbd2e094ae9b6c3245965ed540000d481d0689e6532d6caaf0980f38246b794ebd3067e8de9
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookas31ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2