General
- Target PAGO FACTURA-GABAR ELECTRICA-password(GthBqaJV).zip
- Size 1.6MB
- Sample260722-wdz6rs1bmd
- SHA256 6fd48dc1d3d10720d12a8be2617e0f11a58c6df14088e535c32fb26718617d98
Score
10/10
Malware Config
Targets
-
- Target Pago Ofix Gabar $5,217.70.vbs
- Size 1.2MB
- SHA256 14635bbca8f3850c1b1287abd3908e513033580e727e73aa2e51874d5a426f75
Score10/10Family: Formbook
Formbook is a data stealing malware which is capable of stealing data.
Formbook payload
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Loads dropped DLL
Executes a VBScript file via the Windows Script Host.
Suspicious use of SetThreadContext