Extracted

• • Target
    042PRL1988.exe
  • Size 712KB
  • SHA256 201b2f41c62365df33280901cebbdefbd7bf70b35afe43d1a91f50e68c67e4d9
  • MD5 fe39ac9725c175bb08f2564c62598864
  • SHA1 b099b99391f9184da265abe67fc20b588b32206f
  • SHA512 7cb20b8f9d82e7deb50779bcda1cd2736f2a1fa1c634aeb9c963296fe2ecd3bec94b149f4e468ff1217c89f781b273b6efbb4afc22f0a88eac38eb5a3c9e2355
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookh06rratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2