Extracted

• • Target

    INV& Delivery note.doc

  • Size

    20KB

  • MD5

    9b2cabb78ef070c73f2e4eada3ee315f

  • SHA1

    1652cbf85f9089ff7cc3a0eb2149a1010137e052

  • SHA256

    b5c58a9708d87bdc1b48bc6ed7e4261ddf7115c10d6772197cd8c4e438d674b0

  • SHA512

    a5403ab76265b6ea9a66b47ede4bf49440de33d738d055ccb1b6dcef26a6d7815aa7b64f329732334d452910684d3f274517711d225917ac6b0a197b4c49b540

  • SSDEEP

    384:gvR3LRyWfINlVAYWi62vNU7Honij2PErzm5J8Re4zGzsCi:gvRbV6WHi1PEm50jsi

  Score

  10^/10

  formbookdw85ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2