Extracted

• • Target

    1529e24878b76569a00a6ace946b26c3_JaffaCakes118

  • Size

    659KB

  • MD5

    1529e24878b76569a00a6ace946b26c3

  • SHA1

    4b34d00d51163df2fd910af7f8090d4395e02d2b

  • SHA256

    e16d387101d1434664447f49429575cc204e9314c911b6e6f0bbbd61ed15de0d

  • SHA512

    14d8bbd0efe8e06367dca4bd834444ad25472c42c4dc3fb6cacc7a721d94414f5738844e39edc2305c944f0f559bc1d653a6999d187171c563cbc46a3006d54e

  • SSDEEP

    6144:EfI6LkHEjyKPPPPPPPZWSMPoCpI4n8ZCw0I4n8ZCwxWGGM2LfDrja6GS0rOGecru:CMkudPoCIVZYIVZ52DDrj5J0bJe1

  Score

  10^/10

  formbookhx230discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2