Extracted

• • Target

    jetssofftr543.exe

  • Size

    221KB

  • MD5

    c7c81ed3f21ca0f92316446946656c39

  • SHA1

    d1a3c9c4a1ac579184967f604193f8c1f1c41693

  • SHA256

    aad5593f8b48c2e45fb2344146ac1a16e79addf9fe859cf74c005b8c0b5bc452

  • SHA512

    38b49646496bdaed201b855b0fe6fa5783102a780ff8a55bfa97a37cf53ccc9ab6cd36a234ae6bab1e488c741bc42879fe96a32aff3ed7906653d9e78ae25121

  • SSDEEP

    6144:MEa0NUspTCne0ehbO4+MfVzDPdTG3xVzu5W+3uf:XUsp2epf+mT6VzaK

  Score

  10^/10

  formbookje14ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2