Extracted

• • Target

    e8cdc455c726afea65ab6a4b0b45d45c_JaffaCakes118

  • Size

    724KB

  • MD5

    e8cdc455c726afea65ab6a4b0b45d45c

  • SHA1

    fdd9d44b3aea76ad42f64cab1f433f8daae99e0e

  • SHA256

    f972763991a3043f1e9cca9c8b0d368d6ff9628bbb21fbe4d7213ffd75a67494

  • SHA512

    6009df138097dda48489c15647cf834406cd15331720b52ef0787af191b36b95d42ecb06731a29add61a6c78d9bdb376b2b3ba91ba7d91d8741d2abd665b48af

  • SSDEEP

    6144:wT0p9994cccccccmMI4LSMd1ZOOP9eT+R8a2sUrJLa5SvSWlTlOiIoJuZ2sWTjuQ:wwuMIyDzEOPUyCsR5SOAJhyJVLPQ

  Score

  10^/10

  formbookpediscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2