Extracted

• • Target
    d3f4725b122fb0518b8c1832ba4609eb
  • Size 400KB
  • SHA256 81398fcf0e9612b507cbdf18df673c828d8e08bd8a6abbfcf00261fe84e0bb8d
  • MD5 d3f4725b122fb0518b8c1832ba4609eb
  • SHA1 062237e81055de119a6bd62fefa1101bcdcf7275
  • SHA512 4037e6773517778730bed680f315ceca908435f4a0677721c9ffd65179b047874f93a00602ec4009b26a003f6c07708b31f42d05d70f6ed58da9e8ab039ba982
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbooks3s3ratspywarestealersuricatatrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata: ET MALWARE FormBook CnC Checkin (GET)

    suricata

  • Formbook Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2