Extracted

• • Target

    795998e9064cb981d6a40a34fbeee48381121ea7ac7175ffe5b506b11cf843d7exe_JC.exe

  • Size

    305KB

  • MD5

    ef6f57941b0592e95cbea40f914cac18

  • SHA1

    2b946868fe17ea1cf818a05580259916939aaf93

  • SHA256

    795998e9064cb981d6a40a34fbeee48381121ea7ac7175ffe5b506b11cf843d7

  • SHA512

    308a0569695cbbe882b86a164e8df1e6219593c1ec7bd1b810b469bcbda7382c70f60cdcd6097984f59e1f44799cd25ba50d27f6b1c5cc7a2e07f83f81a324b4

  • SSDEEP

    6144:BnPdudwDsSZjEBHbJfYIcSE1AVXx3Zbij/YxnhreOQxjRAuaT2KlPz8rmL5sZAlZ:BnPdwSO9fuPWZbcgxnhrhBuAlXsGPD

  Score

  10^/10

  formbooksn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2