General
- Target Invoice No. 1563029253.exe
- Size 1.1MB
- Sample260901-k1cs7swarc
- SHA256 fa40373e5a9d2462d48caca66c22f98e65cebe0fe05f81dce42eae9476526673
Score
10/10
Malware Config
Targets
-
- Target Invoice No. 1563029253.exe
- Size 1.1MB
- SHA256 fa40373e5a9d2462d48caca66c22f98e65cebe0fe05f81dce42eae9476526673
Score10/10-
Family: Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Modifies Windows Defender DisableAntiSpyware settings
-
Accesses Microsoft Outlook profiles
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext