Extracted

• • Target

    ec50a0d1ba634421cc3301633343ed04_JaffaCakes118

  • Size

    257KB

  • MD5

    ec50a0d1ba634421cc3301633343ed04

  • SHA1

    bbb06fe1fb5e61e37a3e709228064ee318e6c74d

  • SHA256

    fa0d4eeae6c743ddc44d9664b0e6d44238beff477d1f4e9a560e68026a4264d9

  • SHA512

    39ce4a5d8ae8c33b8fda65443f7decc9661cc4ab4734810530bda3a8ab769223ce56b66eff1f679f4cb7da9fcfe14cfce7d17ae1576c99c4eb51bd20063de023

  • SSDEEP

    6144:F8LxBs2+gAyry4UTQ9V+wp8SYNbNlpX40zpMmEg4FwN:/2+HnSV+wWvNbNlpXzJMwN

  Score

  10^/10

  formbookrv9ndiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/jsgdacail.dll

  • Size

    29KB

  • MD5

    c3755ba829fe0ac168fde4f1f37ff531

  • SHA1

    e534376fcaf95c9284fb242f8b962a85783e2956

  • SHA256

    50d2bcd4477dc52e7c5dd1d2ee59a78133cb4ae3dd367aadc22053de8137a977

  • SHA512

    d55473705589e789d5f92f79cf1c7dcefb7db21976829fc036593ef5de1eaf02a0c002fc9457b65314bba33bd6a05d06e31341bb147472f2160136e189c0a30b

  • SSDEEP

    768:FYH4sBQJDh7wN4Ce1UtpWOPO8P9MuV7ERTJdG4:FIBQJDKLPO8P9P7E5

  Score

  10^/10

  formbookrv9ndiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral3behavioral4