General
- Target PROFORMA_PDF_REVISED97475.bat
- Size 186KB
- Sample260629-hm8ydahs2q
- SHA256 9df8e2bc11d551969955a0f2a146aff099851b46acc942e7dec0608bf8a39b65
Score
10/10
Malware Config
Targets
-
- Target PROFORMA_PDF_REVISED97475.bat
- Size 186KB
- SHA256 9df8e2bc11d551969955a0f2a146aff099851b46acc942e7dec0608bf8a39b65
Score10/10-
Family: Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Registers new Windows logon scripts automatically executed at logon.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext