Extracted

• • Target
    Payment transfer copy.exe
  • Size 675KB
  • SHA256 1cb9eb0fbed2683a2623dca8243a9be47affff1b33b8c86e09a2b64f0d55a9b2
  • MD5 8fd61d45acb6c35dfd0be44fc7efb681
  • SHA1 b90176a6244d5db315c2315315c72bdc50c1da4a
  • SHA512 e1ad98fc9beff689654eabd5492dd4b49b9d2d67bad43b1541321147e4739007fa69bfa402f3eadc88167477e20e096c200ede603205a5b34d06d8dc59203590
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookir93ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2