Extracted

• • Target
    Bill of Lading.exe
  • Size 622KB
  • SHA256 f6acdf84ba27d835f11aaeaf29f71eab77a592fb6fea7a06d76bcd1d9228171c
  • MD5 efd3902bf8f0c22633f75d661582a341
  • SHA1 c606c0ae2c7cb93a97af15f37c4c47d78a86c0f2
  • SHA512 432aeb3b02eda56c0ce0c89ceb60ce7059fc61d7ca6093bc866b02bee11bf11f0876670ac665f9ba6a52f8f1d1178b7de519e91cc588cd68bfeb7551a3648c75
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookn4w3ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2