Extracted

• • Target

    SD 1476187 85250296 MV ORIENT GLORY.xlsx

  • Size

    2.1MB

  • MD5

    4f1d51f64a4d78ad699ac9780766fd52

  • SHA1

    c3e3aaf6e80f786b5098a29883454b37f1b01536

  • SHA256

    58912a62a4c325bc1997bd97f09b884540735290197443522210566132aeac83

  • SHA512

    2ff9d61996038e86ff1f38587051ef50d625ac9005bd5dd0790b7dfd087a547c9b198a019fe793f04f830fa58ed4e35450b6d3afc00df145903deb2dd633b968

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Loads dropped DLL

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2