Extracted

• • Target

    RFQ-PO5510318.doc

  • Size

    3KB

  • MD5

    dc68a5544371a22a377e8243f9e54533

  • SHA1

    451848240fcb806919f471db0ee65a929f443295

  • SHA256

    e8527234d4aa280d1dd664199beb922f040da17b0e83424b9a9a8f4cc00a840c

  • SHA512

    fb644fd4e6d387bb4014a159a780ff834309af0164fa96863cd84d9d8f5728ff6583b2bacdf05e9634524b0a2494d868976a88f09cd18b02e1e29f5374893c56

  Score

  10^/10

  formbookh3haratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2