Extracted

• • Target

    3e28ca003c881930e0fcce81855312c6_JaffaCakes118

  • Size

    358KB

  • MD5

    3e28ca003c881930e0fcce81855312c6

  • SHA1

    50fa481c8275c8e0b50e4138bf51a4b4f7203f7d

  • SHA256

    dc15dfb23d47826b769bbcd72149949bce3439b6a977eaa661d375a0861c861c

  • SHA512

    f99c4d655ec66a608f5349929036d8614d69d18238663af69145672b4e8120e5d9167f398be9bead9acd70aab7952f0fb2051681298c3e3d4ba3b864ba8c2445

  • SSDEEP

    6144:Bx19xfRz9RzGhN7NLcaI3d4qRo1q0cX2Jje3gsn/2Js3kbC3NDiRzXgbhrUU5OPN:Bx1fFTGjRLca8d1G1q0Dgwsn/as3kW9l

  Score

  10^/10

  formbookbd2discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2