Extracted

• • Target
    2cc9f4a819185333bc946cbe1c550210_JaffaCakes118
  • Size 910KB
  • SHA256 2ffe3df675a097fefad87b0c66d028ff6a732dbd67f4385777c4fb52a3e60994
  • MD5 2cc9f4a819185333bc946cbe1c550210
  • SHA1 6ce7d3ee1af2e3ec697dad4002d3b6e9110dba3d
  • SHA512 98d00d533510bad7fe70383733b90c82df1186871e03360480d5506111dee8b8bfe37844d880084af2d05624e0fcb22fd601a19bc53e6e30f340afdb09dd9856
  • SSDEEP 24576:oNHCmvI0fjnjOgYwC4U4o5EOYf4yI7OUcaY:wfRLNYwtUD7OKY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbookteratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2