General
- Target Cheque Copy Ref107383093.js
- Size 470KB
- Sample260820-rzbcbadh56
- SHA256 1d6b0f9cbe3e24c5c5204683932bce16f806e7b03faa798686879fe5ff43fbd5
Score
10/10
Malware Config
Targets
-
- Target Cheque Copy Ref107383093.js
- Size 470KB
- SHA256 1d6b0f9cbe3e24c5c5204683932bce16f806e7b03faa798686879fe5ff43fbd5
Score10/10-
Family: Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Downloads MZ/PE file
-
Suspicious use of SetThreadContext