Extracted

• • Target

    e2cb7aaa6bdd1a9029dd1db1ac0107556641d03608b8e8d520229e216462d779

  • Size

    753KB

  • MD5

    194e6e2cb1b914c33e5d0ea233f7a813

  • SHA1

    82eb016de527bdee7cc391219e1e6cdcdb64ad3d

  • SHA256

    e2cb7aaa6bdd1a9029dd1db1ac0107556641d03608b8e8d520229e216462d779

  • SHA512

    4cf030e4d43791e0c2006dffb7619e2a1f2b8ca596db01d8e3091b99f04b1d93a5ef36c21fda3189837e4901cc750f0c8c6a9ead93af67c5148c6b663242681b

  Score

  10^/10

  formbookfs8ratspywarestealersuricatatrojanmetastealer

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Meta Stealer Stealer

    Meta Stealer steals passwords stored in browsers, written in C++.

    stealermetastealer

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2