Extracted

• • Target

    4086EA3B.doc

  • Size

    55KB

  • MD5

    3db137b68ac902eaefc048a4d04c89c0

  • SHA1

    c2127b40577e2a59ea0d0dea98f4fa96a77fdd8a

  • SHA256

    ae8912485487bbd99f7defde38ab0da19ed679c5eec9d0272ec8ea69fc7d191d

  • SHA512

    75db6ca8d479e9e1a6fd96730421c3bf271318868f7e1f3c3bc3461af48d681957130305a0a386c4565ee0084732d5fd70b0de8e096a6c8fe1db9b9bf3f42820

  • SSDEEP

    768:pwAbZSibMX9gRWjIxJDZDFpc9w13oCGj9DeJM4ujBJPlfZS:pwAlRzxNZJpc9wVoCGj9Kmlf4

  Score

  10^/10

  formbookoy30ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2