Extracted

• • Target
    emezx (1).exe
  • Size 876KB
  • SHA256 e9deef760186498e9b4d075c784b6170bc976a767652f4a5228215fd1b1841cc
  • MD5 275a9de898967bdeef75ed29807a21fc
  • SHA1 6c26ce6c8a37d8a5571ca734c8c0589b06b91a6a
  • SHA512 54f01511da837ecf9045644e0ec9de607bc9974c6638f06dcfadc68126561d784e71df08953cdc8f637f17e382983322bb93011762ed1c7867cc5bc1aa818174
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookg02eratspywarestealertrojansuricata

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2