Extracted

• • Target
    Transferencia____________.exe
  • Size 765KB
  • SHA256 363c3288efc15bdba3db28988766e6554fca04e6bcb49e094f7a521388016fe8
  • MD5 fb99b1ab017cfe35ddfb30f5f3fcf6c7
  • SHA1 8baa5b4d5cfcc7b5d6adb819ffd89a11b7540833
  • SHA512 9333f9399a452c182a434d4645d06d92d53a19e6d1af81d923b7e1b708e15705649e5decf4ba4240a332361f50a393c92074577eb22dcf7ff1a28613de9f8117
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookamdfratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2