Extracted

• • Target
    Quotation.exe
  • Size 634KB
  • SHA256 b4aa332e0b01fcc44224b62f8d7b306b862523b7a276e38efdaeea019ce6d7d2
  • MD5 1050dcfb5a3f8ff606049a41c882bd36
  • SHA1 2dd01580b2b15935a4027c92fb2b563cc632b0b4
  • SHA512 796bf3973656eac5df329f5c35e376933d6a2fa6de09f5f061e92be13fe9ec089abd8318bf29c5c167184215de8ad745cf70a9f8566d0bede62f8854ad1d7cc2
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookw2k1ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2