Extracted

• • Target

    jetssofftr543.exe

  • Size

    221KB

  • MD5

    c7c81ed3f21ca0f92316446946656c39

  • SHA1

    d1a3c9c4a1ac579184967f604193f8c1f1c41693

  • SHA256

    aad5593f8b48c2e45fb2344146ac1a16e79addf9fe859cf74c005b8c0b5bc452

  • SHA512

    38b49646496bdaed201b855b0fe6fa5783102a780ff8a55bfa97a37cf53ccc9ab6cd36a234ae6bab1e488c741bc42879fe96a32aff3ed7906653d9e78ae25121

  • SSDEEP

    6144:MEa0NUspTCne0ehbO4+MfVzDPdTG3xVzu5W+3uf:XUsp2epf+mT6VzaK

  Score

  10^/10

  formbookje14discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    mnfvgv.exe

  • Size

    5KB

  • MD5

    3d4499d3223b637035a9ea797bc04a9b

  • SHA1

    979e0f0f542f473406c121187ba0d2833da5f3ce

  • SHA256

    e8ac6c1d309e48d85d535d7b14cd44cfa2228fb5b5db89365320daa112fcb799

  • SHA512

    581b2daf1591afb5125ff4bb79159ac22870a40a13927bd6f0cd3dac6753b3a3227003bead69afdb0fa59cfabc6dfc051f287d58fca87ccbd07c7054a041fbba

  • SSDEEP

    48:SA+FMfElrY+fFLdPvh5ZymvnZH3+1gQaFkUmRCZr8BruAUKXRuqS:O+fwrXAenB3+1QFP3ZYDhBx

  Score

  10^/10

  formbookje14discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral3behavioral4