Extracted

• • Target
    Se adjunta estado de cuenta.exe
  • Size 774KB
  • SHA256 5d94a08cddf84ab11cc26e7e8531a04bab46f9ddf44c1ccd7e38a269ffdfaad0
  • MD5 4a951f6b124474b354ad38403074d5bd
  • SHA1 b633ade3ba620fcc4ae0a96adc0e30c502cf3017
  • SHA512 3b1c03ee01a32e186e4a9a84f90f6713c90c7cc04e974d28956155ba754d5cc19e5544b9815b069a5284dd1d05eecd36b4e137945619281041b43c5f26a53d73
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookbc3spersistenceratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2