Extracted

• • Target

    dabd977757d5a8f9f6c4d0eec59aa8b4_JaffaCakes118

  • Size

    1.6MB

  • MD5

    dabd977757d5a8f9f6c4d0eec59aa8b4

  • SHA1

    871b0d771cae8940cf701393b73c09af95d28dc1

  • SHA256

    1bfc762ad3b4af3779cdc51c124f8e027e9cb5ea7e2a91d2a0fe65feeb6d009b

  • SHA512

    fbec5b7307947f8787110f938c021d7b01403089ce772c36b206fe358a469070986680ea6f9880a188c98561bbf41dd4d2678570a16d4749962dd2445487fc13

  • SSDEEP

    24576:Xu6J33O0c+JY5UZ+XC0kGso6FaonTouYYB8JTN7PnTNVZ/Vdsq+RLfGMOwtWY:xu0c++OCvkGs9FadNVZIRLfelY

  Score

  10^/10

  formbookm2discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2