Extracted

• • Target

    ba013f275078b890f94beecfe96157d4_JaffaCakes118

  • Size

    268KB

  • MD5

    ba013f275078b890f94beecfe96157d4

  • SHA1

    6fdab8bbec0ee983be2a2738fa9b6d9d5fe01eef

  • SHA256

    61ee6e0f78b9a691785e5423670187886a694b9d8a5ead06c66d4b9bcc820602

  • SHA512

    6596ffea90d05ef15377837c2a9e0974c97a6620f62edd69e2d810d1120de076c60486a79a9795838c00d630b48bb9c1b7145d0dc06fd1a1ad31426c83160029

  • SSDEEP

    6144:KlGbtrV1eYFnjgIE9+U3XAUYKiPc8bM8dsQcuuM/a1qD8iG/:3ZDn8v9cKiUp8OcaqDA

  Score

  10^/10

  formbookch26discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2