Extracted

• • Target

    d5f142b409d4ee2db56859ac3ecdad66_JaffaCakes118

  • Size

    365KB

  • MD5

    d5f142b409d4ee2db56859ac3ecdad66

  • SHA1

    3048d6d0fae713f04145e190c2e24047efaaef7e

  • SHA256

    4883acd78928ccbab14d46de6f5be7ed91f0d6be16ad83b5214dfbbb218865bf

  • SHA512

    dac8b3c4a3d19753ef1cff5c17e4c1470897175cac0854c922c406acbb589192ab9614d0e965344789b1644ec62971e0664fc7466926d5788750063f242a4e6b

  • SSDEEP

    6144:Q9x8PY/bqy9n2wRfvtkOthbRiPwEMJ4ynpMiO6h1Kkbb9pIPKaaMqXFU2XihU:Q9x8PuhRFRdDhtuW4ybL1xbRKPtHT

  Score

  10^/10

  formbookl9discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2