Extracted

• • Target
    Payment Advice.exe
  • Size 891KB
  • SHA256 6d901c28cdd7de9753e4876a2f981ccddc9005095bf55b4503799dac8b7f0711
  • MD5 d03cb7703051057ebb47ad6f0e668db4
  • SHA1 36aa1b533d413f0ce46dd31f7243ba7d98fa84d2
  • SHA512 e5f9108dc788bfffe43363257fdc86832e0e33e044be1a68a97f4da837fff5bbfc747fbede940089c3a88f0699e30c7e0fe05f4787f1caf6421a5d7e14cfbce5
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookir93ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2