Extracted

• • Target
    STATEMENT OF ACCOUNTS AS AT 31 AUG 2020.xlsx
  • Size 685KB
  • SHA256 e617a1c393996f9a323738a08cfe2848c8608d078d08054ee58caa9d45ff4685
  • MD5 b3620c184fe0e8d8b4fbd6a9adf6205e
  • SHA1 62e44695fec07959d22e38f774d3a04f2bf7f3cf
  • SHA512 708d642b8f93fcb592d8a22ebcdd228077f4dd9fee4a069c232b995dbf4611b1f7ba883d5390b42f5706a327e093076d73644941878def374d78e34380672c5c
  • MD5 SHA1 SHA512

  Score

  10^/10

  rattrojanspywarestealerformbook

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Loads dropped DLL

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2