Extracted

• • Target

    ef072c5f7469a88ca616b35f21906da1_JaffaCakes118

  • Size

    479KB

  • MD5

    ef072c5f7469a88ca616b35f21906da1

  • SHA1

    6e12db7215a102918ba498fe6831932d0bd9f060

  • SHA256

    040b451ddeae61cc065f2d5e780aeee6ec8d58364a86f6a97a86e4c56efe5147

  • SHA512

    b6fe68f77c499b8c68e44f900c8c3df05becd3d0231d09976438977d24fec337b0a0981745cf171ecccab7cab1ab1d09d892dcdbaad8ea253e03865cfd73adea

  • SSDEEP

    6144:XToCpSRFx3JcLd87NH09lXLPRvBmE+0nkMeboO2P0gqXspWu5fXnrYrjuT7:XToRFx5cLgHAldvBm1x2P0gq8pWB

  Score

  10^/10

  formbookcrbdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2