Formbook

Formbook is a data stealing malware which is capable of stealing data.

suricata: ET MALWARE FormBook CnC Checkin (GET)

suricata: ET MALWARE FormBook CnC Checkin (GET)

suricata: ET MALWARE Possible Malicious Macro DL EXE Feb 2016

suricata: ET MALWARE Possible Malicious Macro DL EXE Feb 2016

suricata: ET MALWARE Single char EXE direct download likely trojan (multiple families)

suricata: ET MALWARE Single char EXE direct download likely trojan (multiple families)

suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Formbook Payload

Blocklisted process makes network request

Downloads MZ/PE file

Executes dropped EXE