Extracted

• • Target

    https://github.com/enginestein/Virus-Collection

  Score

  10^/10

  formbookhe2adiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Contacts a large (7864) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Formbook payload

    rat

  • Executes dropped EXE

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Legitimate hosting services abused for malware hosting/C2

  • Suspicious use of SetThreadContext

  behavioral1