Overview

overview

10

Static

static

3

Invoice_Pa...st.exe

windows10-2004-x64

10

Invoice_Pa...st.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    30092026_1041_29092026_Invoice_Packing_List.7z
  • Size 712KB
  • Sample260930-mrdp9ax18p
  • SHA256 01fb63355f3a4774589260f178720091856c17871ea2c6f62b80e5acf3979312
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
formbookdiscoveryratspywarestealertrojan

Malware Config

Targets

    • Target
      Invoice_Packing_List.com
    • Size 795KB
    • SHA256 12c1bd2c203bde00d3c5dd2b018362c68435f7ba91ccc14c1fce94f4161a1f27
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryformbookratspywarestealertrojan

    • Family: Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • SmartAssembly .NET packer

      Detects SmartAssembly .NET packer.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks