Extracted

• • Target

    fbfd173952479920e0f3a8aa41bdd2faea86d2de9a7080a023831e4769c94468exe_JC.exe

  • Size

    545KB

  • MD5

    b661633cfae6e392a3994073f6efc706

  • SHA1

    a81a13005df44e605ef3e17c05adb77b009cf774

  • SHA256

    fbfd173952479920e0f3a8aa41bdd2faea86d2de9a7080a023831e4769c94468

  • SHA512

    3c50916a58985027771660e104812cea7920ba374d00f70b92ba788ada61187ed0c7e8f307ad194bbd82564b01cd31dc11af2dbab82bde3701f2e5f6795112d5

  • SSDEEP

    12288:xqDU6pqFdwBg8HT4zoYe1A5OTb8H8lrTDYnbE:gDRqMBnzFh1A55H86n

  Score

  10^/10

  formbookoy30ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2