Extracted

• • Target

    b0c1602dbb50fc0176f12b13a5b0f488_JaffaCakes118

  • Size

    700KB

  • MD5

    b0c1602dbb50fc0176f12b13a5b0f488

  • SHA1

    0cda636c741659c4da49cec32825c51da7a2aad7

  • SHA256

    33de0b92d4271914e3525fff936097d35cb6cb96ed21b0ff0d2970d9c67d4872

  • SHA512

    17da91f0fa8eaa3f435d44ead5b0f708b45de377176cb62ab1d318ea35e404641ff809357d16fdebb6a7bdf40a10048f6dcbf4f3ea7fd87e834d0a5950260163

  • SSDEEP

    12288:gzbQ+X8+UiDLbRHahwUOJXfoQLaxCvqin9tDmdv3x26xTKPCGJ:gzbQ+X8+UiDLbRHahwUgXfoNMTC/xLT2

  Score

  10^/10

  formbookm8g0discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2