Extracted

• • Target
    Payment Advice.exe
  • Size 512KB
  • SHA256 abb347ac140c2ba551fe45121675aa273b9ea265337baa3e54aa4b93d2fb6db6
  • MD5 ab0deff2c852d449951896bc746c6229
  • SHA1 cd7c9ecc3a4284e074b76e336241ea48f2062422
  • SHA512 6ae7d6bda6276e268c2a4a36b5de51f91f65883ab3d8d966f3eb53fe92a015733b9767baa1249caa2b310eb4a307fcf2669784fd2da310ffa077a6985ba99e25
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookir93ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2