Extracted

• • Target
    588e64f0cecb7be8ffb253782164867b
  • Size 209KB
  • SHA256 7f9ead41557a685c5f7cd82c6607d7bbe98397bf87cf04be8e7e7e13bea41938
  • MD5 588e64f0cecb7be8ffb253782164867b
  • SHA1 07680b353cdc696bece3f891f0a6a73c9087edce
  • SHA512 db3b3411b080ed1f3cfacb5ae7446499a8250d24551a468d50c0059c614ac2692962d14ac33bec5880278727b396b290bcf519c895a309076119b0e30cdf1eff
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookr75hratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2