Extracted

• • Target

    jets80054.exe

  • Size

    304KB

  • MD5

    f57974ed632c9b3aed13be4e2d4dfd7b

  • SHA1

    729614769140d585e61b63cf04da1ff528ca58b5

  • SHA256

    5308026699c3ce88917c846e9b6ae9939fbe08415a88937ec6ab74fd507ed98a

  • SHA512

    0688ca6cec67e33482d38f31ae108ff222740fa486e663ed139f632412394526a6bbc51ae4c712ca818a3c4800c1859ae1ed11c12cc3cea5ef30075f86c1d433

  • SSDEEP

    6144:MEa0NMikS9Le6rGEsNirbtz6xl3Y0ansq0XTHpGMQ:XMikSraESiF+l3jHq0k

  Score

  10^/10

  formbookje14ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2