formbook | a48a5576dffe0abd8dd33883fa903fb8c053626e8c21818db5e925d821c3ff4f

Resubmissions

05/08/2026, 10:48

260805-mwgmpszvcy10

05/08/2026, 10:43

260805-msdfwavhkb10

Sharing

Copy URL Twitter E-mail

General

Target
Requirement Document 20260803245.exe
Size 1.0MB
Sample260805-msdfwavhkb
SHA256 a48a5576dffe0abd8dd33883fa903fb8c053626e8c21818db5e925d821c3ff4f
MD5 a04899cd195327737bed8565d45d9788
SHA1 a35b1a802f7d6656fbf44775c7ea01d36910d6e2
SHA512 b7c74b9c5e0d4e47cb193a53472c011f49feab8e2b709a0df4b7d2e4db907fbd59e6fb89c3da3cace0af2e9eb84004769e66acdb948fa69c54d19b2ac7fc79e7
SSDEEP 24576:jY+awfiZlWRkvvdn7mq6cwxkWtHYnzfVkJDlgYNRFps:jY+awqXGwV6cwxp4zfmJDlnLFi
TLSH
T1563512696A0EEC02C59187B1067AF7B601700D9DF925C35B9FFAFCEB7865A463C092C1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  Requirement Document 20260803245.exe
- Size 1.0MB
- SHA256 a48a5576dffe0abd8dd33883fa903fb8c053626e8c21818db5e925d821c3ff4f
- MD5 a04899cd195327737bed8565d45d9788
- SHA1 a35b1a802f7d6656fbf44775c7ea01d36910d6e2
- SHA512 b7c74b9c5e0d4e47cb193a53472c011f49feab8e2b709a0df4b7d2e4db907fbd59e6fb89c3da3cace0af2e9eb84004769e66acdb948fa69c54d19b2ac7fc79e7
- SSDEEP 24576:jY+awfiZlWRkvvdn7mq6cwxkWtHYnzfVkJDlgYNRFps:jY+awqXGwV6cwxp4zfmJDlnLFi
- TLSH
  T1563512696A0EEC02C59187B1067AF7B601700D9DF925C35B9FFAFCEB7865A463C092C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery formbook rat spyware stealer trojan
- Family: Formbook
  Formbook is a data stealing malware which is capable of stealing data.
  trojan spyware stealer formbook
- Formbook payload
  rat
- SmartAssembly .NET packer
  Detects SmartAssembly .NET packer.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Family: Formbook

Formbook payload

SmartAssembly .NET packer

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2