Extracted

• • Target

    jets009576.exe

  • Size

    269KB

  • MD5

    1424f51c647f3f91ff8bd772ed81ad11

  • SHA1

    b9a60b20215d65bbf95e0ddbc1747a263e6ee0ff

  • SHA256

    bb0bf0449c531f9f84fadd5ab4df59906a9fda97d25677eedfc85d82f1470561

  • SHA512

    232c9f132e94d5acd12e75e3c747817cd4fa78a20cd06810840f30ceaceb9e7352c9f1e110a7f63fa88eb708ce1161e4938a8baaeada0a47cd5f24064eaadddf

  • SSDEEP

    6144:MEa0Nlg0SbqaRdlL3wTblUpk7BYDSx0gWw2zOVfo30qAy6cuu:XR/YlOUoKm2gWRqVfo30lxu

  Score

  10^/10

  formbookje14ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2