Extracted

• • Target
    RE,RE,PO.listed items.xlsx
  • Size 828KB
  • SHA256 98bb91d8c80f060020b8b49a0a13a1c2cd0f3f5faf1aaad75b0825511ab06fd5
  • MD5 61482968d92f5fced3211a1ba2393656
  • SHA1 c1559ffd8dd2b43b544b98ee611fb7a4b1598b3a
  • SHA512 49d19fcad16d6c90f33f838ddf768d68387b818f96f3594a7fbb7498a45a4fc06f300b4bc86490acde0b6823847feded4302a9ba0f5ab3667ec2a21f4a171e96
  • SSDEEP 24576:cdDg0YXc5DWp2rDLI6liqTY9rOkGnulmYfD0n7:cdDg0acUp2jfpEO7QmKIn7
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookng04ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2