Extracted

• • Target

    fdce18358d597d6df791071d740c425a_JaffaCakes118

  • Size

    855KB

  • MD5

    fdce18358d597d6df791071d740c425a

  • SHA1

    12d29b718d32559ccd7ed233711f4e169ee8908a

  • SHA256

    2e6fe07659b3d7fd953909856a82866e3927065febbddd09f3e8acb885d12dad

  • SHA512

    7eeb95df9696f3265cd42b2c994a491210d5d8a73baa8e8236e6edc9badab3fd255fb66f93d51facd9421aded6ac192921f20e31113825765e24ffbcd2fb26ab

  • SSDEEP

    12288:TZ/mi9YLax040VZpgRpspsWAc+dvshMNEd3f94zEh43d4ptqod+m:T6LIIlhjJf9og4NSqogm

  Score

  10^/10

  formbookvd9nratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2