Extracted

• • Target

    98a4496b6ba500b3bf0a4df0dc48f79c_JaffaCakes118

  • Size

    257KB

  • MD5

    98a4496b6ba500b3bf0a4df0dc48f79c

  • SHA1

    cd91a828fec3d162ab64e6720c67187c2345f238

  • SHA256

    9c36e836116772df22669a1d5e2af11e49cd8425e730b457f5d6979ca6d00dae

  • SHA512

    c20838dc9802509bda3d0c065be66a82d1180901fa4724065988d891eabc86dcf2ad75e9de68c38d4631959088ac8566f72e6bf28a95e5b39d521569b2e05d9e

  • SSDEEP

    6144:F8LxBsijXd92QqOH+0RpV+4rrz/xXajfw3:/EDtH7p/rrz/xXEw3

  Score

  10^/10

  formbookbkyediscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/iewybf.dll

  • Size

    29KB

  • MD5

    4256ddc7ba4f2ab39fb28f081e870cfa

  • SHA1

    8c1f0f6e94b68510bbffbf81143c5f26ebd913b6

  • SHA256

    d519f718eca42250c87657b679a8a9d1766d331e6ee242d18bd739998bf44350

  • SHA512

    a71ac74ad9d95c6b755858b0a75beaa3ec26e20eca252445a2d1541156d96bd39e39c30daa5eda28bafe8de2e2d67c2c70b25dce6b7f38f4ac0a0dfa60599c1a

  • SSDEEP

    768:ubYYsBQJDh7wN4Ce10NUW5gPO8P9MOVAiTtm/MNJ:+IBQJDPGgPO8P9vAVm

  Score

  10^/10

  formbookbkyediscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral3behavioral4