Extracted

• • Target

    7f315c83910b3a196c1fb30475e5101b_JaffaCakes118

  • Size

    1.5MB

  • MD5

    7f315c83910b3a196c1fb30475e5101b

  • SHA1

    899b5855776737ee0115da31a5b58a4f89bf73a8

  • SHA256

    e759a4a906a9496f6b9f60b90e7ff49ef812090ce465108f08d32ac916e20cff

  • SHA512

    c5c4a374e0039f45171927e3f795ecde401dfb268110f4ddef3c0f5fb32c564e60cee8c5273fb95522394ed584438abcf1c99fb710e382ad9a2fd0239940f178

  • SSDEEP

    12288:FtxQ6oDjffKbuNb9UnYqmDNBoj28w1f2wt1SdnUtk4yQ6H+Uy1Susr8MmH3ja:honayx9UnQDDY2P7tsdUtkAZZS5R0

  Score

  10^/10

  formbookm3n0discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2