Extracted

• • Target
    75139da89b79d88a8d5f2f527446ecee_JaffaCakes118
  • Size 419KB
  • SHA256 dfa4a44e0f63c067e406e37c7b8915ac728ce6ecc1d13cf280de7064861dd872
  • MD5 75139da89b79d88a8d5f2f527446ecee
  • SHA1 f9ca1387689e952afaec8de1e30a48ae5a37aa91
  • SHA512 486bf73dde2828b53135f7075cf6bcc3c1e42ca50afbce75d610092cc252d6b21efa5176f20554d0225abdf9aeef6adf0f6bc1d8f0a5ff8a7a6e8a44eda16caa
  • SSDEEP 6144:J4hBCklZb/DZSAv2/5+mRbyGKXNUP8AioXAU+LoutZW20XmsAh6mh3:Or9lZ7DZSAvWbIXtdoXp+YXmsAh6mh3
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  formbooko9bsratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2