Extracted

• • Target

    cb198e943e5c25204869a0e0d2a0d964_JaffaCakes118

  • Size

    2.0MB

  • MD5

    cb198e943e5c25204869a0e0d2a0d964

  • SHA1

    96c3810223482ed17cff242e5fef92b5e8277152

  • SHA256

    f85b0ebf72b1230d8582028ef03f438d04996f2d227f5d3f3af40694a56a724e

  • SHA512

    b27fe38702adbc33ed13f6b8e4ce3d2deb47e154338d6fc67996965c82fdb7223669db20a07a96c240504ef1e4c9c1294a8df722d3969243414790ef7d616140

  • SSDEEP

    24576:vo9iLCQbWxKSYcSIsu4kUpcZcAGSOAYpwcG9e9O1eR:vbbQNCID4kUS6sOJVWCOY

  Score

  10^/10

  formbookcmsrdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2