Extracted

• • Target

    681b4fb5d374583fa961ba8ad171585c0ba9d2e346c5fbb6fce92392a10a2d16_JC.exe

  • Size

    637KB

  • MD5

    bb712012e3d293f7b3fb208b7601be7b

  • SHA1

    c6a1f7ec74df5f2b938afbd628ebf026000fac8f

  • SHA256

    681b4fb5d374583fa961ba8ad171585c0ba9d2e346c5fbb6fce92392a10a2d16

  • SHA512

    87a390327fd3260075470ffbf9ec36379f70fc3ffe06905bca354c5eba44987d2b77df5b00fea9fb2cdeefc2caeb1bee174def75d3e34e5344ffcd2613757537

  • SSDEEP

    12288:vcaa4lrrE7cAakbrkpvv0hqjyPuiGYprf:vcz4lXEg3dvMojQSYpj

  Score

  10^/10

  formbookoy30ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2