Extracted

• • Target

    c709725aada3a8083acb5cf6e6f485b1_JaffaCakes118

  • Size

    484KB

  • MD5

    c709725aada3a8083acb5cf6e6f485b1

  • SHA1

    3d16d5b14543524b230fece39cea76157a2247e6

  • SHA256

    31c3df5957f6eb0398f72aec9d8609f6a55da6f4051ea103f53999845efc93de

  • SHA512

    cade4d3b4370432707bff79baee3e3592bf31696229590b90f636cdb7e7fdeabc92412ec85ad4527fb23682dcf695bf3310c46be7ca9b7ff0d3342778abba0b8

  • SSDEEP

    12288:qOX7sE8V2V6z9q5Q6r/cS5eod/dTO5dGmxDrH3V3:qOL+2E0u6rHHR6dGmxPV

  Score

  10^/10

  formbookphdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2