Extracted

• • Target

    c52bba22aab2fb97d79ef862350a6f7e_JaffaCakes118

  • Size

    1009KB

  • MD5

    c52bba22aab2fb97d79ef862350a6f7e

  • SHA1

    635bfffc72aad12c87e85af14d6eec6683fc0df0

  • SHA256

    44539749971b58f590567a17b718be17f01c5bd37048711215e7e75a62eb056a

  • SHA512

    b1f0da6630765229ff45d861f62a209a0d6b45a28f1b112f65c947b71a5834db26097048803600a097dc0a027b0a68defc22259d5cddb1e6e3b29ecc62d0482c

  • SSDEEP

    12288:vGpCJdcMRCZKGBcFg2Dt2NjFVnq0HI5tGjUqVK5EeiVPHxgSbfrUxUuB:OCJdJE3InDMNjTrHsOUHUPHxgSbzMUu

  Score

  10^/10

  formbookchaddiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2