Extracted

• • Target

    jeetss456352.exe

  • Size

    214KB

  • MD5

    dafccfe6911e74fd47cf1461e3580ed1

  • SHA1

    b84783ab8d2c044c9a4cf2765831fd776f220c64

  • SHA256

    8d203db46294994fba62e63ddaf99b53c5b8abf2e407f7ee516f5df1d44cc1af

  • SHA512

    4093bbdb3f57b7dff3d6f5e699698c303c9a79cb74bba23778241ea3b8bd12e380ab034065a3f1ff306638346fce69dc8dbc4461983b3cc6c6a95e8a2386c4ab

  • SSDEEP

    3072:qUJoFfWzzl+cSM9BPmuGky8vtGAxeVbzb0kA5nyq956rosqcqXMZdQLfl7Z2JwQo:qweEp9Nmj84AuTqNvGr3qbXrLX2CO4T

  Score

  10^/10

  formbookje14ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2