Extracted

• • Target

    cbd7b03a1410f9d9c404a33020c2c49f_JaffaCakes118

  • Size

    484KB

  • MD5

    cbd7b03a1410f9d9c404a33020c2c49f

  • SHA1

    46873e92417016950176968517a80cd4f83f2927

  • SHA256

    659b0101cf2a80010a2254f632a3964ca0917c65694e6cdcdb258f2ea36c30b4

  • SHA512

    8b4163b6d94a3fdc71331461626bf9b6a4af1687e9f155a55122d6152ed12e1d2880c4dd01b6b3ee7f953fed247e35b09d6b28a78c115b4dae8488e451767c2c

  • SSDEEP

    12288:uE4cI068+xWfFSAUadblygLj69i4r8dO2C7qM:uEB6kNBlygy9brsO2C7qM

  Score

  10^/10

  formbookaidiscoverypersistenceprivilege_escalationratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2