Extracted

• • Target
    Remittance_90523_03.exe
  • Size 1.8MB
  • SHA256 cc48a92eedc0b016d5faad9bef8ea4d9831328650cc6f51064c569955b5c2382
  • MD5 9c2d7d1d32d96adb3a53a4d060fb0ed1
  • SHA1 e643b711718223ae35aea1c91bedcb3464cad482
  • SHA512 4890d0ae02643a73bec4b18535e5453da506b2d1168466f3f9838e92adf2634b95816c13a3c64c97ac4a14568ee0cab1b6bf26e8a2a2a386a439c42b9aa52d23
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooks0s2ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2