Extracted

• • Target

    f632a2441686827d3de393b79f3722a3_JaffaCakes118

  • Size

    303KB

  • MD5

    f632a2441686827d3de393b79f3722a3

  • SHA1

    0d910314d2fc5768c2546f0a0d409b8e8201c9d5

  • SHA256

    44e4fb6e15fab6a1185c6687df614d6fdef232879ccb1f8be9c811ece57b2682

  • SHA512

    deb37794426966229d990c22917fa98d92e2399bd0afe022c3acc6c99122391f3c4b9e83978f67a4a8074ea4f918bf7037b4d0e5a2537af52f0cd4f823d54a59

  • SSDEEP

    6144:G5t0eBLvGV/fMutxOq11XEZzbWrwPabTq6RCjQL/qlhFY9QL5QQA:gaebq/Vf14nIPRv/qBYe25

  Score

  10^/10

  formbookhx319discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2