formbook | order inquiry[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
order inquiry.exe
Size 417KB
Sample200813-8yprrnab7x
SHA256 3df6c5354d1899b7249078b6aec00872710092c2328c0a3e20c79409f42adad4
MD5 a15202c9f382be718047dee5b8570754
SHA1 aff3dafbbb6f8fab6791aa5f9cbc18a164da68d1
SHA512 677ec10c2f8bb217d510da13e939162dcbc6581914f5309a72af1ebdb1fcf9e97af13c3cc325dc1ab9995c645dd3027bdb2271e12dd516ebcadb83a7d59178c1
MD5 SHA1 SHA512

Score

10^/10

rat formbook

Malware Config

Signatures

Formbook Payload 1 IoCs

resource	yara_rule
sample	formbook

Formbook family
formbook

File Explorer

order inquiry.exe

.exe 417KB

order inquiry.exe

SHA256 3df6c5354d1899b7249078b6aec00872710092c2328c0a3e20c79409f42adad4
MD5 a15202c9f382be718047dee5b8570754
SHA1 aff3dafbbb6f8fab6791aa5f9cbc18a164da68d1
SHA512 677ec10c2f8bb217d510da13e939162dcbc6581914f5309a72af1ebdb1fcf9e97af13c3cc325dc1ab9995c645dd3027bdb2271e12dd516ebcadb83a7d59178c1
MD5 SHA1 SHA512

windows x86

Formbook Payload

rat