Extracted

• • Target

    63272a154e4e52ae49fec537748a8b2b_JaffaCakes118

  • Size

    358KB

  • MD5

    63272a154e4e52ae49fec537748a8b2b

  • SHA1

    fe459ddf75ddd9b187649a7104f43f913285c39c

  • SHA256

    05d09831faa4e143793e8a32acb300fc775713b93c816ad0a63b97caf643c1ed

  • SHA512

    9824e4af3fd6de4b9c75c35f3e1ae6f4530cc7c6ac1bf3410aef94df0cae48f589393ff7eca8d1abbd97ef7aeb1cf21377a4cbe1a4e50f42d750f9eeeb5ea0b9

  • SSDEEP

    6144:3x19xfRz9RzGhN7NLcaI3d4qRo1q0cX2Jje3gsn/2Js3kbC3NDiRzXgbhrUU5OPN:3x1fFTGjRLca8d1G1q0Dgwsn/as3kW9l

  Score

  10^/10

  formbookbd2discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2