formbook | 74f09445e1a75b5faa7038d8ab371fd405766dd3d68dcd2eeb4c066e335a2566 | Triage™

Login
Reports

Overview

overview

Static

static

3

f1d688be9e...18.exe

windows7-x64

f1d688be9e...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
f1d688be9e2a5fc6af4c629f52fc9a70_JaffaCakes118
Size 291KB
Sample240922-mkhevsvdrb
SHA256 74f09445e1a75b5faa7038d8ab371fd405766dd3d68dcd2eeb4c066e335a2566
MD5 f1d688be9e2a5fc6af4c629f52fc9a70
SHA1 1503f5fd7ca00b0c85269102b4478ca458217a2d
SHA512 2ee77ce7a61d79fe5332c6b15e8e629f8bd4d9db8bce6aab5e5ab69e30962898a29a2f042531a819fe6aa3810b66983522c6b2c22f97bc47e3c3780fa21df705
SSDEEP 6144:4E0E0MKGK8IHE9L2ap5YbaxJaL+1UkQlZciQIRVovmhfSe1v:4E0E0M/0E9L2C5RJ3SksZckRYYfl
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

formbook jo discovery rat spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f1d688be9e2a5fc6af4c629f52fc9a70_JaffaCakes118.exe

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

formbook jo discovery rat spyware stealer trojan

Behavioral task

behavioral2

Sample

f1d688be9e2a5fc6af4c629f52fc9a70_JaffaCakes118.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

6 signatures

150 seconds

formbook jo discovery rat spyware stealer trojan

Malware Config

Extracted

Family

formbook

Version

3.9

Campaign

jo

Decoy

Targets

- Target
  f1d688be9e2a5fc6af4c629f52fc9a70_JaffaCakes118
- Size 291KB
- SHA256 74f09445e1a75b5faa7038d8ab371fd405766dd3d68dcd2eeb4c066e335a2566
- MD5 f1d688be9e2a5fc6af4c629f52fc9a70
- SHA1 1503f5fd7ca00b0c85269102b4478ca458217a2d
- SHA512 2ee77ce7a61d79fe5332c6b15e8e629f8bd4d9db8bce6aab5e5ab69e30962898a29a2f042531a819fe6aa3810b66983522c6b2c22f97bc47e3c3780fa21df705
- SSDEEP 6144:4E0E0MKGK8IHE9L2ap5YbaxJaL+1UkQlZciQIRVovmhfSe1v:4E0E0M/0E9L2C5RJ3SksZckRYYfl
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

formbook jo discovery rat spyware stealer trojan
- Formbook
  Formbook is a data stealing malware which is capable of stealing data.
  trojan spyware stealer formbook
- Formbook payload
  rat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

formbookjodiscoveryratspywarestealertrojan

behavioral2

formbookjodiscoveryratspywarestealertrojan

© 2018-2026

Terms | Privacy