Extracted

• • Target
    NEW ORDER LUCART 23.05.2022_xls.exe
  • Size 799KB
  • SHA256 edc8375d2a96c96eb0d3b8c7acfba4a9ba7f602deb4a2738d4ff07f0ee129e98
  • MD5 adf2c4368e0dd67ce1a2363a89326f8d
  • SHA1 deec1709fe16ba2dddcae15c0ab45d24128f9b55
  • SHA512 2a8532117b2a0314840db68893a044465c9a10fd85e8ab95a1326624de8386997062e6a211956207e181001d8299c23bea620536c91de4f322d4306c6c10a96c
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookamdfratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2