Extracted

• • Target

    OCT SOA 2023.doc

  • Size

    259KB

  • MD5

    4149f8e7e1d0cc4d1c7f16e598fd900a

  • SHA1

    9ad3d2a84c5f7a8dc1f4ab375cf756e64a21c303

  • SHA256

    5e427957acc0998dec94707a3b6a3ef8e0958b4fdf7dc8d1de112e2fa20bf174

  • SHA512

    e1dd8507ed6eb54ba579e262efce6858a35449104179e11ff8e50b7ac4c7b785eeb3802d94f79e065684ce958d0807f46df468ca3f32862d39d787a926c4da08

  • SSDEEP

    1536:iwAlRHP/6L0mx0NKR3nAja04M0XJjt7Rr1U:iwAll/6yNKR3nAja0f0XJjxRr1U

  Score

  10^/10

  formbooko6g2ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2