Extracted

• • Target

    d316934fbbc328ee5764cc3ffad8342ebb530df25f43e3f46e0e27fcc8f7067f_JC.exe

  • Size

    835KB

  • MD5

    33ffe47617ab65e5fbb0b2eedf0b5b4e

  • SHA1

    394351007b7fa83b84a30c66b84083ba9af66410

  • SHA256

    d316934fbbc328ee5764cc3ffad8342ebb530df25f43e3f46e0e27fcc8f7067f

  • SHA512

    b73e46c09c42c4196299e4787652991de3cc61ee869833a4b241d1222bbfbab9bd31e59533835a57fb15d221891ceac387d5a8e97cff918046fc84d81cdbe0cf

  • SSDEEP

    24576:mk70TrcKMs8ftsubdunEtMif2Fo0VANdUKsm1:mkQTAZsubdunDif2F9Agw

  Score

  10^/10

  formbookbz24ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2