Extracted

• • Target
    banka odemesi.exe
  • Size 217KB
  • SHA256 d8487ecaafff72cace4e090aba52aa5c20b18a1627b1abf96f3591de054eb887
  • MD5 34770feca03adae9358a2f4f2d32b34d
  • SHA1 3af04294110dda183196c64e0136bf001c1da11e
  • SHA512 62fed58a2a246a3d1546f0feeb6ccd9a705e50413d03da999a038c84a1f5969d6a60978a1dc81dac6f5b168787678e42f24e845e5a58295710747db2ad268c3b
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookmh76ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2