Extracted

• • Target

    JaffaCakes118_60a69bb9a571454ac99e7a222be3a67c2473fa0cfd5c151f17356f8e48d77408

  • Size

    241KB

  • MD5

    483fc82bc1f416dadd7db16ba5440c6a

  • SHA1

    2b180d03d36aacda5e1791a2d89c2c44ce170f6b

  • SHA256

    60a69bb9a571454ac99e7a222be3a67c2473fa0cfd5c151f17356f8e48d77408

  • SHA512

    93943c4b9a85547f879aae02bcde08ab6f9ad8958e0a350452ac5053254729b0216e68c8869a5ceeb8ae0f9ca495a6095157efa1a3a52510a6632a482a95dc43

  • SSDEEP

    6144:HNeZmycM5oTdt4hdza6a2pAy9HPAPZPcgRIZi:HNll0kw3HYP9cy9

  Score

  10^/10

  formbookgb10discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    lvymw.exe

  • Size

    64KB

  • MD5

    ddc8d50e346229f2c76c329e53a48068

  • SHA1

    a91202033dd59452603fa0fdbd2b50b1917e48a1

  • SHA256

    23c25521d704cbc1c35aa84cc0d4f9cc7fef48eb118a55a4a4002265836eae2f

  • SHA512

    4dad956526f033f558fa41760b70e989ad0d242941c776a7ea69a916b195cb8e7737b2c36c9662cfc54c51d99eadff09872daf129d0a92c3c38cbe71365a7349

  • SSDEEP

    768:aVXfl41oDRWOL3qLVUw2b61rXnuvUF0jPkbawiBhNKtc8WhsWjcdUjC+9Vv:YRbqLKzbWwULeyc8EsWjcdUz

  Score

  3^/10

  discovery
  behavioral3behavioral4