Extracted

• • Target

    PO4018308875.doc

  • Size

    49KB

  • MD5

    1e7bc879d7960afaa08148c635ae534f

  • SHA1

    e1a0db056bdc1cba07ef43c27a80e5bfd79b4eac

  • SHA256

    8c4b07ce49252a4ed12ad611a9f8fde65a63fc12368c6726776e86e140d3872e

  • SHA512

    87305e45665309e3e6de38aae33a61481445257cbef1f4ce268db0223481bb6b0acaed8d81aafee00a43d53b0278fd27a2fcd34ef51b670ca86c34108ea49366

  Score

  10^/10

  formbookratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook Payload

    rat

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2