Extracted

• • Target

    jetsoff6543.exe

  • Size

    214KB

  • MD5

    3052597dc463bafa0c102a204dbf58fc

  • SHA1

    bc083a8e34abfc24ea8b94b1325354ea2f4a08bb

  • SHA256

    84a150ec171d193dbd5738ade685f3225716b6945e59625ce458f0a9069860b8

  • SHA512

    9925797cf5061017bcfbf37ab968c0ddeda7e7abd6d2db8abb62aeb6ca0a711672b1cfd9c8a3ef7af07cedc9b7a4d8d0071a2371caabaacd9323d270ab6d4246

  • SSDEEP

    6144:qweEpoJiPJhQxjr858KG3NLsJrdtvUlAg:boJi0xnYUaJpx5g

  Score

  10^/10

  formbookje14ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2