Extracted

• • Target

    e6f07c4af3e5cb4d02d44f0b758604a0_JaffaCakes118

  • Size

    383KB

  • MD5

    e6f07c4af3e5cb4d02d44f0b758604a0

  • SHA1

    e03ae248c99b5cb6f0aba67d67f29ecb0eedb107

  • SHA256

    241245cb421ccd025316c936471b0f6cf3c4ac4eb00ee45e4a91b7d63b1abf2f

  • SHA512

    3a5d1386937f1a25969a172b32cc69d291a472b05da80b761c847997736b8076822cbe460b9546514f41a88eb94280777750c299c9258156b3982b52afb7f368

  • SSDEEP

    6144:2DXdayqqqqqqqqqqqqY4Vzb81ILy0pEiT3ijHTj/zZW/vsJap7fTaYsc0mWW0eef:OaieIfpDTSjXyHmbjjVmmR

  Score

  10^/10

  formbookjjdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2