Extracted

• • Target
    Quotation_pdf______________.exe
  • Size 843KB
  • SHA256 ae33000cbdc7cc10a8d86ce07727c8159d66a6707e2a453d996dc61c709de96f
  • MD5 6e54bbe0fe1885c5262b5f1e72640a7b
  • SHA1 bd26fadf4a0c34d58c5a58eafc6b53a3b4cd60e2
  • SHA512 c57148bc4df9151048646bdaa11ee28c8a3c301980d9aa1008a191e45fc885eaddcc1563d7f4d44a52a29c80ff49a9167e3a5fa36888dc3c9d18725010232e96
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookajkiratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2