Extracted

• • Target

    ff4ffd9a3232033f76865b29164e5f7e_JaffaCakes118

  • Size

    359KB

  • MD5

    ff4ffd9a3232033f76865b29164e5f7e

  • SHA1

    cee05ab39bdeeb35487dd1148c7d1a5b87fbde29

  • SHA256

    5e449948561d45b21093b8e036c9d700dc2a80cb759563143908d05053a8d8ac

  • SHA512

    a56442c7d26acdd4b8ec48214f3490d6bf8749be532ed49b90c9bf5938a5357ea3b462b07e4faac0a89a828294f247b6ec75ae796f1738652f9a7aad97df0f8b

  • SSDEEP

    6144:8brqW2GhN1/HKthSWSFZMMV+iPKGy5UHDfh0kEt8EPMGrRyGqpJc:8brH2iNPFZMMVfKG7KvxPMUkJc

  Score

  10^/10

  formbook3ensdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2