Overview

overview

10

Static

static

1

Bozza dei ...zzo.js

windows10-2004-x64

8

Bozza dei ...zzo.js

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Bozza dei documenti di spedizione – Conferma dell'indirizzo.js
  • Size 35KB
  • Sample260420-pp3mpsew3x
  • SHA256 a378d9ddfbcb133d15e59e6a7066c624b90152c38439aab5885319fc679d64db
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
formbookdefense_evasiondiscoveryexecutionratspywarestealertrojan

Malware Config

Targets

    • Target
      Bozza dei documenti di spedizione – Conferma dell'indirizzo.js
    • Size 35KB
    • SHA256 a378d9ddfbcb133d15e59e6a7066c624b90152c38439aab5885319fc679d64db
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    executiondefense_evasiondiscoveryformbookratspywarestealertrojan

    • Family: Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks