Extracted

• • Target

    c6e799eeeba0345de98b4e9a6ac76b82

  • Size

    292KB

  • MD5

    c6e799eeeba0345de98b4e9a6ac76b82

  • SHA1

    268bafbd996997350d32521a0012602960c5d004

  • SHA256

    e17bfb8370c8badf90756f650e1be4794e77a57abb3619c30789364756304759

  • SHA512

    b229294931fe70480a7cb0937b33311fa838e5b5f1ac880a1e8fd06b67ddee6c4b691d9a0d93004be86deba5300faf55511cd910fad56f89c4e79b5eead6f681

  Score

  10^/10

  formbooknk6lratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2