Extracted

• • Target

    54f044ac2f6763dff567801cbb8276c6_JaffaCakes118

  • Size

    358KB

  • MD5

    54f044ac2f6763dff567801cbb8276c6

  • SHA1

    623007ae021213e7e8f44b3fb89e9363b0f3e675

  • SHA256

    af9c6b565169b1ebec9e788bd3e4a3db7afae10348c06dd239602ccaea9ffb73

  • SHA512

    a9e84bc78b6a1752a3761f10a9e4025802c033ff777a565b0fdd2069c2b7b566d2d56fb5df96eb832f16ab7eb9228dad9c9f4b90fcfdefd763fb062889af50d7

  • SSDEEP

    6144:Cx19xfRz9RzGhN7NLcaI3d4qRo1q0cX2Jje3gsn/2Js3kbC3NDiRzXgbhrUU5OPz:Cx1fFTGjRLca8d1G1q0Dgwsn/as3kW9W

  Score

  10^/10

  formbookbd2discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2