Extracted

• • Target
    Remittance Advise.exe
  • Size 1.1MB
  • SHA256 e7962cdd23b186bb033234ee3275fef94db2650f2a15fd78b25c8a2662effc80
  • MD5 00adec8c438b2e8284a0e01b909c6087
  • SHA1 6b0420f99fe43d2ab9b675585c9c04e17a2118b0
  • SHA512 68b5b955ef1853033cd2972becab8a47017cb56756e1511f8f0865724b0728a82b2e97b9122d710e37c2d0bff95893156ff6d3edc92de1247e9336fb508ce3e5
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookn4w3ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2