Extracted

• • Target

    fe0bb66a63f9a8f1891f1baef1be0d47_JaffaCakes118

  • Size

    368KB

  • MD5

    fe0bb66a63f9a8f1891f1baef1be0d47

  • SHA1

    f9905ab3e9de2909a8a807378c459f5afeac715b

  • SHA256

    b77514c2e7f724916721d371d23770f66b28c22e7cad05c1b080067b5eca6d34

  • SHA512

    e42ee3af5fceafa66be9695754771bb2bd73f580fe309359951b607c1df725837b5e4ce614c8726c6c5f20765370c7861c9157a73063080de5a00493ee8c72b5

  • SSDEEP

    6144:WbRXfXZ2MYT46mmYUPGkYA3dXTGWpttSjG14VQq3hw:0RvXZxKm4xYEGc/Sj64Gqxw

  Score

  10^/10

  formbooktrdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2