Extracted

• • Target
    HESAP Ekstresi Detay.exe
  • Size 213KB
  • SHA256 e6373eddd3eea61d770a921ee1f63f43145fafef60b2303bb8d2633a895f6b86
  • MD5 93d5e87c64699c1515cf91d07265274f
  • SHA1 8eac59e6762d4389b1a7baad2ba8dc266c1b678f
  • SHA512 dc20a230566f00a975ad8de89aa58bec5193ada3ebd32168388d1965936172ec5895fe242c2baf68d0335f615086130ac43946c2d1db7833f34129e20ede7aae
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookd23nratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2