Extracted

• • Target

    jetss46635.exe

  • Size

    261KB

  • MD5

    62cc148705cfa7c981bdb823de72bb93

  • SHA1

    1b47fd2f7535f55d44abaea0ce85d685841c6ef4

  • SHA256

    f79c3a8f98d47aab53d03bce09d51bc17c25b9cb051a69f040b0ada6fc6abb88

  • SHA512

    0c86c17dcbd338db984b3765e489510e90b71cae33746da75c2310c4722f35e878d01e94834d444e3a28e3012a2631dacfed55e69561edba44212711622475c3

  • SSDEEP

    6144:MEa0NXK2m0R1Ic0wsf08mIm2+vARvuR5UKMUgfkmoLv24T:XXXRL0Pf0TIm2+IliGcLvV

  Score

  10^/10

  formbookje14ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2