Extracted

• • Target

    NEAS.NEAS982a9a52e532bbfe52941c4ab95c2899c1af75e9a3eee2b1977e3f49e8a3e71eexeexe_JC.exe

  • Size

    324KB

  • MD5

    a2acbc6d322c87a19747aae6cc1ea486

  • SHA1

    00e2411d71b3d381cfe30ecf724cf87ae79129bc

  • SHA256

    982a9a52e532bbfe52941c4ab95c2899c1af75e9a3eee2b1977e3f49e8a3e71e

  • SHA512

    f1b3df6a1c441a52fcdfb99b435f98b9983a66be0ae518b6cd9e5d0f54b15bedc7cc316506c1417a0d76c857c1892fd2bbd53e1b08a641bdb25ddac456931dfb

  • SSDEEP

    6144:XfL+oqzQat5qlz2JeOdc2Qs5B9dwejy0wHCE30RedG9Iskwpz3XJ:XfLiQaTq8LG2Hv9dwqyVP30Rec9kc

  Score

  10^/10

  formbookdz01ratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2