Extracted

• • Target

    e3d2bd1833ff6c9e89f73ee2b79b2342_JaffaCakes118

  • Size

    358KB

  • MD5

    e3d2bd1833ff6c9e89f73ee2b79b2342

  • SHA1

    4b93758269baff081591310df957975532d2434f

  • SHA256

    18c32e90076b14e788bda6f63a4b0f5480efde6b36ef77f129cc381a2583cf39

  • SHA512

    9b7f3826d0cb36b3a4ed27e000e098336cd5243a94dfdbb4f313e5417dc69e8419800b624dee681f4f069f65f6a065ce078761d14ec35d7c918000236dfff26e

  • SSDEEP

    6144:wx19xfRz9RzGhN7NLcaI3d4qRo1q0cX2Jje3gsn/2Js3kbC3NDiRzXgbhrUU5OPN:wx1fFTGjRLca8d1G1q0Dgwsn/as3kW9l

  Score

  10^/10

  formbookbd2discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2