Extracted

• • Target

    2f6317332dcc700e57a3b9a7edd05c27_JaffaCakes118

  • Size

    358KB

  • MD5

    2f6317332dcc700e57a3b9a7edd05c27

  • SHA1

    162b8b62592347c9d920c2752420b2380963dfbb

  • SHA256

    d7c89cc2168dc2f91c54f3d53a452e6accdfabede52305abe00988ff862deea3

  • SHA512

    46428f2d98a556c17dba871f565d1a4c5a9ecbd64134993640ec7cb782b94a86a6b547eb259a6ec4f2ab4e824885333b11ea034c636d2799197e569ac4cb31ae

  • SSDEEP

    6144:7x19xfRz9RzGhN7NLcaI3d4qRo1q0cX2Jje3gsn/2Js3kbC3NDiRzXgbhrUU5OP+:7x1fFTGjRLca8d1G1q0Dgwsn/as3kW9b

  Score

  10^/10

  formbookbd2discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2