Formbook malware family
Formbook is a malware family tracked by MalwareAnalyzer by Cyble across 3 publicly analyzed samples. First seen 2026-08-03, most recently 2026-08-18. Observed ATT&CK techniques include T1105, T1112, T1543.003.
Corpus statistics
- Publicly analyzed samples: 3
- First seen: 2026-08-03
- Last seen: 2026-08-18
- Verdicts: suspicious 2, malicious 1
- File types: pe 2, html 1
ATT&CK techniques used by Formbook
Recent Formbook samples
- 3ddce244c308f1ce27307b16467f29bd7f3e2333c535cb4a0c5d93a0b7296230.bin - suspicious (2026-08-18)
- 5029f6b798db0f286b466533bb1005353791e44e2ac4ca1db0866994664f9acd - suspicious (2026-08-14)
- 04e293d3a35fc2a8a1c90f28fa4d1c92412a04757035972fd49f47de0e5e5a9a.bin - malicious (2026-08-03)
Frequently asked about Formbook
- What is Formbook?
- Formbook is a malware family tracked by MalwareAnalyzer by Cyble across 3 publicly analyzed samples. First seen 2026-08-03, most recently 2026-08-18. Observed ATT&CK techniques include T1105, T1112, T1543.003.
- How many Formbook samples have been analyzed?
- MalwareAnalyzer by Cyble holds 3 publicly analyzed samples attributed to Formbook, first seen 2026-08-03 and most recently 2026-08-18. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does Formbook use?
- Across our Formbook samples the most frequently observed techniques are T1105 (1), T1112 (1), T1543.003 (1). Counts are the number of analyzed samples in which each technique was observed.
- What file types does Formbook use?
- Formbook samples in this corpus are distributed as pe (2), html (1).
- Is Formbook malicious?
- 1 of 3 analyzed Formbook samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends