Extracted

• • Target
    Sjyssaskr6577543.exe
  • Size 589KB
  • SHA256 35edcaa0f180ef140f70ee241a648c6335cf3055dcf2d6074d5ef7966b55925d
  • MD5 6bfc8357041faa36770eed0275ed1525
  • SHA1 a0bfc1be460ebc4c8c424ff0a570e93f0795b287
  • SHA512 05474b967f928cec23ec62d5a22d751909c7ddb19d901d9decbd1e47a6e2a233c85a0a4c18d0a69e159ac6cd89adfeb4fa1bfd7b7dd9e1b5240bb9f4fecf7412
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooksn31ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2