Extracted

• • Target

    f368cd250e313612a8dfe5604aa44c16_JaffaCakes118

  • Size

    2.1MB

  • MD5

    f368cd250e313612a8dfe5604aa44c16

  • SHA1

    4a2cfe4b057b990f56a862e7b766e289bf526a5d

  • SHA256

    267f66c96b16bd52ee383b06d728abd7f395e244cee4ab6a77caa319ae2c7996

  • SHA512

    31434c49027e0049307d48e5cdda0950d865d1b0693441ad944e90d331cae62c9024988f2039fc049563d0185055ff4738774b596749014f7217c29dbf781ec1

  • SSDEEP

    24576:TZzd/zy0ifLh84QPNt1MdYswzl+KC7FUTXqKdDF0eIsr4kUQcWCWtIgQowi:TZXZIA4kUZWHLQow

  Score

  10^/10

  formbookcmsrdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2