Extracted

• • Target

    02971b038e3224fb89a5aa824cd4388ab3108e86571312d127e32b6a59b1b3ec_JC.exe

  • Size

    642KB

  • MD5

    2673a176c9729737316a6e6d660f0f79

  • SHA1

    f3466f9e8e6d1c9e9d22e6fe9e2ee601d9c22788

  • SHA256

    02971b038e3224fb89a5aa824cd4388ab3108e86571312d127e32b6a59b1b3ec

  • SHA512

    9e6d7703c8993e27b86bc5d4549e224db18176034e6d4331ab483dc187c77c543084cef2468a368a1dd48b0d678dc8f509ababb185b97d7756c426948442e958

  • SSDEEP

    12288:KayccWwjCUqEupAtlUpQSkHBkiyrhKwAKNdI0U+VRslA7jbA:0CdEupkl4RmkvyeI0TR17j

  Score

  10^/10

  formbooksn26ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2