Extracted

• • Target

    5bb908bc26d924f82881c7b6bacab8cd_JaffaCakes118

  • Size

    904KB

  • MD5

    5bb908bc26d924f82881c7b6bacab8cd

  • SHA1

    9d2be3781553beefc962f0915cf0efd62a60f71e

  • SHA256

    000c575f75146d5a79c2f0c6a3e60dd6544815c0937fec71418efa90ac0f6443

  • SHA512

    fd5b00565bc2c40ed7edaa316ea4efd4fb7341a8e346b239bb308c1072673236f4e4c2fc87bbe4d5fce357977fc2f736724990bf85b17af163797e60e12e5b5d

  • SSDEEP

    12288:ADhHB8r1nmaZw413xiUk0FZ9LqCWAITNwcUOpkSkkFNpYmK7MhfIsMfK1oe+r0um:X1nXtPi6FfLqCzITNpmbmI4q

  Score

  10^/10

  formbookfrfdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2