Extracted

• • Target

    b643c1dfbcea7629e8d7a9d64c4779a6_JaffaCakes118

  • Size

    1.4MB

  • MD5

    b643c1dfbcea7629e8d7a9d64c4779a6

  • SHA1

    02addb137f4407dc05af7d862b2533b131733f59

  • SHA256

    f6bb8018c90c49a3b09ad5b94cbfe5009b59abdee04d05be8f4ae8825f71cf19

  • SHA512

    0a08c959b9a51c558cfa031a14efb2eaf880e7a632341303d30199f0a68ce36b7a8ea1d802244eeca8fdee3c34352c70e121d5e860be68ebb7356cabae6f0e1c

  • SSDEEP

    12288:b6SgaIMVjLz7T8BiOcef3gVZsZZZsZbesbZYhZ8bfVe0S+dkl/WsiH42mHNClsrJ:AiOmeB4ftdCbt/QS5JNuBaP2nvm

  Score

  10^/10

  formbooknmdadiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2