Extracted

• • Target

    68e0117d2b14f9b4db44063953c9f028_JaffaCakes118

  • Size

    747KB

  • MD5

    68e0117d2b14f9b4db44063953c9f028

  • SHA1

    0b2751b17a9131a9fc636a7dd5136ff8c6951049

  • SHA256

    54c0138d6a0dbd5967d7cf51eb753b29aa1fd72a85152285bd22347fa6654022

  • SHA512

    cb3ebc8964151ccdfd0ee0f78dc1daa7dadc3ce1fb4eee1d291ee306894a538167374d4750943dd2265407e92429ada74da3169600716215e9b4f74764c939c6

  • SSDEEP

    12288:bxojH5jdL/KyCR7PqRo2YQLa3RFC7cvoLTKwnfzOw3Ue8:+ljBKnRIIQOhKcCTKI3

  Score

  10^/10

  formbook3nk4discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2