Extracted

• • Target
    Ziraat Bankasi Swift Mesaji.exe
  • Size 461KB
  • SHA256 9b3f9e2aed4eeb2b06bc8a8b968b6b1abea82d96a3f3eebf9440dc4c25047d96
  • MD5 6eb8a4a501c63567e97532a62d5d6cc2
  • SHA1 7ef400665ecf9f256c880cf1115ccf8d6af8ef1d
  • SHA512 79321515fa92a2a85ec4e33b0038de39f4009199a9ec7f73448764c024cf13529a4d4f9a87f8c2e45c5cdbcdc0fa28a6e8d45872b52ebf9d54fb82c58980d24f
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookah6mratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2