Extracted

• • Target

    625959a89a80ab1f8bbd5ab00fe5d7bd_JaffaCakes118

  • Size

    682KB

  • MD5

    625959a89a80ab1f8bbd5ab00fe5d7bd

  • SHA1

    9e6c739f7f55c9741de97ef965061c093cfa31bc

  • SHA256

    f31a6236317cca6357085df19cf0805097ae4bb6f78cf146b8f419d179386efd

  • SHA512

    301cbeeab1a6c08e64f61539934d233fa7eef59a4eeb74d2d698da0f51fef85834d4e239a2e145d6fd5182e86b94086e2ddf28bdcc5ff06f7c741f7e8e01bf6d

  • SSDEEP

    6144:gIPxuedVfSu7JXr6ehPIEUYx+5JFCIaLvevHPH+xNURhmNbaCC:gI5bDtXr76e45nCFevvevU2b6

  Score

  10^/10

  discoveryformbookfndyratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2