Extracted

• • Target

    fe5a7f1c4f9c4924c8f99fedac5b5fc3_JaffaCakes118

  • Size

    493KB

  • MD5

    fe5a7f1c4f9c4924c8f99fedac5b5fc3

  • SHA1

    9d4ed513769ee036b3e93c14585af94dbb7f9dd0

  • SHA256

    b69927fbfd7eb038b59aa9b7e9f49cb02d127d48fcf6517e65a379e982e806bc

  • SHA512

    ac0e2006ce9c85aac4e6f8fbce7fdf827202c67bc6806919d496d5b9b0fdfc452b397dc76ee0b28be31444b0bc58a2c05750dac4b55bc260f74f983c52cff0db

  • SSDEEP

    12288:jaz6hGWLY69Lw8/FpQXc8PAZGRMfmkAEMZp7:5LYgLwoFpQM84ZR+aM

  Score

  10^/10

  formbookgbrdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2