Extracted

• • Target

    ea9f9fc409b8e70415b11bfcf37e09e1_JaffaCakes118

  • Size

    557KB

  • MD5

    ea9f9fc409b8e70415b11bfcf37e09e1

  • SHA1

    13fe23e9334428c7898657f094db5cb234000ac6

  • SHA256

    43391d3abc411fd3198710c32127898396759f1372ee99fb3aea8efd8e50d086

  • SHA512

    e1c78808853ed762730895295ec6e775287de98c4f797da134cc45315d9b3b67059f7e4b96ec9d6581f7545887b5cf566b12df9e894c657637601661edbd419f

  • SSDEEP

    12288:Ya2DLn2MOytQK+HUdA0Y56roAC+tgy/UbJs42AvTR9Tn2HW13A:ODq5ytQeSZaoW4xRJn2oA

  Score

  10^/10

  formbookz8bbdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2