Extracted

• • Target

    jetss4321.exe

  • Size

    213KB

  • MD5

    0f558015aea4fab0704f0a81241c95de

  • SHA1

    701d1f39fd047f93543d63fa93b7cdf6ef29d1ee

  • SHA256

    983fe597e0687a206126a3a25d356b3f30431883e692fb1744c7d655b9b6ee59

  • SHA512

    19da1777a225f9d9f59717506758eb448721d1ed534338919a181d1a5471a116560601125e5cda4f75e4720f962dfada522cabcede7a633bf36ea40c8f638425

  • SSDEEP

    6144:qweEpTH0JdteiykaUKT3CR+AVTCkTgp3c2n7Zp:bD0JWkICEk2ki3c41p

  Score

  10^/10

  formbookje14ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2