Extracted

• • Target
    ORDER LIST 011405.exe
  • Size 269KB
  • SHA256 48556d0392a4d83d45fb033f8deab48ebc85ebfef95616191b43512d6250cc01
  • MD5 a6cdc84551455132ecc5db9a7101a674
  • SHA1 7edce32aae9ffaf610abf903ad223bc48f23ef92
  • SHA512 242d8e89bd74904b156c01c2247bd92fca99d9d25f2436ecedf7408fecdc85f0ad3242cdbebef8a226ff7edc5c2cdb521afdeb4b52927dac6808f2a349e489aa
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookb0y1ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2