Extracted

• • Target

    jetsoff887453.exe

  • Size

    226KB

  • MD5

    1eea2dfdae7eb894956ca1c1640f68c5

  • SHA1

    d84785baefe3f1fce5bbd9cf93c03bb09d8a20e8

  • SHA256

    45b23c325946154b6990adf193926f99019ccc14f815a9768c208494197d3208

  • SHA512

    64efce3783fd512b03cff3e3c3b93bda7ddf793f199e64809a13c64b948e91deb68dddb1394e5a24353ab42012df88e4a7f0a213b29e9ae3f006bff19755572d

  • SSDEEP

    6144:MEa0NOhe6ib7DKeu/cIJyJJnJCDTRn5lAAfh:XONibPeOJnJY9Dh

  Score

  10^/10

  formbookje14ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2