Extracted

• • Target

    f0420dfdd25909430646c7655e25415e_JaffaCakes118

  • Size

    799KB

  • MD5

    f0420dfdd25909430646c7655e25415e

  • SHA1

    422040f4bf9d36a4f3aac60b07905f3b95f353cf

  • SHA256

    a9a23a0d9df00e223a3c3b5c9ab750ae576b3217752e7a054435291b4d10a970

  • SHA512

    f2b8eb6abc4e70e375fc805b7ffa409c702bb7f62ea68c24f500cb0a6b44c5f0d65c1e85fa2470b63ee346520ecf468d52094985d1c39a908bbd4132a3cc56e4

  • SSDEEP

    12288:AYHdm1fBr+IwICEMytGbPGcbXDbE1Qla6RgVcP/7kvDxul+6Qw5Eq1uJ2:AyAiIlCPtfIv9XME22

  Score

  10^/10

  formbookczadiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2