Extracted

• • Target

    attachment-2

  • Size

    36KB

  • MD5

    1024edaea952ddfed7ee9067dd266409

  • SHA1

    56b86cc12b63201a23ab3926901501f0aa5680d7

  • SHA256

    0b20d40d91927043566ec42d1d44c23bc0522e19defcd366c8354b9ea14db68c

  • SHA512

    5375187e3ff03b4386c5f9a449ebbda2ac34b20231f3bf4dec84ed99f6173855c8f98aa545fd49255449a2fbe978adf65f86dcc2c5261aaa455790a1ddd11b7b

  • SSDEEP

    768:SFx0XaIsnPRIa4fwJMZAEgpJagU+8DtIvBjJK:Sf0Xvx3EMZhkagU+etIvBFK

  Score

  10^/10

  formbookgtt8ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2