Extracted

• • Target

    ba2cd86b94baeb58becd532319250fe2_JaffaCakes118

  • Size

    259KB

  • MD5

    ba2cd86b94baeb58becd532319250fe2

  • SHA1

    31e88e27c5840c2a0b7840d3c4c0acd489f0a8e5

  • SHA256

    6d725aa4c3dd38bc7f924af4891b82a9c993e2db67765c72be42778a9c1b561a

  • SHA512

    7c3b2b3c3446bd2c1ea04c2d84cfed87ee5b686af62702a06199619e2a96fba300b7ac91a1f14699e38d53ae342d16b38436bc9b2c54bc8967366d6031fc549b

  • SSDEEP

    6144:F8LxBsILehr/8rqSEeh2K6T+FISUYwZj6zVoooV:/weB0rqSECK+FIkwZORoLV

  Score

  10^/10

  formbookdn7rdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/cbspar.dll

  • Size

    30KB

  • MD5

    31bff8b807f552a663c1a9b37a130564

  • SHA1

    c91442fdd89050d3a37d234eb6595f11f1697afa

  • SHA256

    8c25e6add26bc8ff4c545ced91b02663a2ba8222f1b5e5208910705186c12c9b

  • SHA512

    316cae0648c6ec274b9d2f2ef13d3cc4033505f6859e0ad836bedbbee35356bb0ddaa18eb3d1cc71ec90885188d9df4ba7e41f6e09af4b417f9d475964e848c6

  • SSDEEP

    768:PYYsBQJDh7wN4Ce1k95WuPO8P9se1ABTE+FppTNLFlgs:PoBQJD6LPO8P9fAW8ZNEs

  Score

  10^/10

  formbookdn7rdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral3behavioral4