Extracted

• • Target
    tv.exe
  • Size 664KB
  • SHA256 ddefebb59f9e4b8fc00e13686024f829fbc7d82a2b0d07fd29748071708a5850
  • MD5 f1784327c0fa0c2928d0415d25b0c5f6
  • SHA1 5c99c1b5883b787d6bce7ca6716f4e45d9455a0f
  • SHA512 7aa4e1ed3bb51da6ad0ce48d2904b5cef82605ef880013022ae1518af95190aa8419749e7d8571254519fa43e09db739690e91731009bc0102c298e4e1498f06
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookmi25ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2