Extracted

• • Target
    5fc986129c3d833b1c7e5ba6ff3678bc
  • Size 214KB
  • SHA256 d02d076842cc94fa6612b13ff0d2f77e1ff9150d22607cfe3962da4234cf4ed5
  • MD5 5fc986129c3d833b1c7e5ba6ff3678bc
  • SHA1 2ace6bc0488df9b8592e25be3de38e6c9a0c16da
  • SHA512 7f496926ea5026eda78532c001ce21e6f9f6ec4474ee995909a53f106def291cd7338072e56b29b7844ea43dc83fcd3eb6f8e36d2db5d8d5e0281059d60f9043
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookfw02ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2