Extracted

• • Target
    wire swift copy.exe
  • Size 1.2MB
  • SHA256 7f0e1d1ec3cedb0f7855a4d8a7b2fb3905c58c999604162fc669ca4aa361dd70
  • MD5 e49f2228be478c0adfd27fc6d103e733
  • SHA1 69d3e65e9b1476de013ec11cde3e740b9bc634a4
  • SHA512 93b54f3c6758f7a5cf8a2368459feeb6a228794ad7134f6d94315f397fb5fcaf655dc06c468ead4f118632694d9ab4c5b6a5143c4049b23486a8b806052418c7
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookoto8ratspywarestealertrojansuricata

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2