Extracted

• • Target

    Soa.doc

  • Size

    512KB

  • MD5

    c8d6f663f18deded129dcd09717fac93

  • SHA1

    d9693e9110dcb432447fa12d3e5d3a5e830a4984

  • SHA256

    ff04de070992e03856e6f04a66c1fb8c0861c5e655eb13e8c0c1d266c73ea501

  • SHA512

    eb2e2f252b891a75a3ae4e320c1059a07c06b5e3c4a39321211c9b9c0fe694f66f3c411a2a4799d712aa688e35f4f6a066b1ec4fa94626c70f52175578511be6

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2