Overview

overview

10

Static

static

3

Enquiry 1525.exe

windows10-2004-x64

10

Enquiry 1525.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Enquiry 1525.zip
  • Size 673KB
  • Sample250718-lp49raywas
  • SHA256 f8638f083c98bd295705f0e563077726a72ef319635d4211e84df369cec98230
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
formbookdiscoveryratspywarestealertrojan

Malware Config

Targets

    • Target
      Enquiry 1525.exe
    • Size 749KB
    • SHA256 50bee81de3e9e73ef381e154620e5e81a3e8aa2d62ae88efca8e56d27feaf1a0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    formbookdiscoveryratspywarestealertrojan

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook family

      formbook

    • Formbook payload

      rat

    • SmartAssembly .NET packer

      Detects SmartAssembly .NET packer.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks