Extracted

• • Target

    JaffaCakes118_6a02b032ec9f2ab8fd607270afb20b06143ad445d32fb2e3eb1ebf1fbccef951

  • Size

    336KB

  • MD5

    7faec042ead4a8402e9097c35bc88a74

  • SHA1

    6040d26db1804db01d3b2687f12ad21fd07068a1

  • SHA256

    6a02b032ec9f2ab8fd607270afb20b06143ad445d32fb2e3eb1ebf1fbccef951

  • SHA512

    da39bef06777e105edacb242f69dc2e8fb30097b32a436c1858dee34d9ba964c67f744d21eca1cc58297b88c61c6f5d6358bf68d0fa09d44784abb57c4958208

  • SSDEEP

    6144:rGiPsaxUSMQAvIm9mebmLojolPgznVVYGWSarT8HzIn:waxW99DZo9gbArT8Hz4

  Score

  10^/10

  formbookh2b0discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/cwhxmitph.dll

  • Size

    178KB

  • MD5

    e168e018ae7b50b12ccbf621f92a8d80

  • SHA1

    f58c9aca0a2d1f9598fab015124ce3b7b90b973e

  • SHA256

    b13b4eef285efc06e845504a1daec9949d4182c34a9a1737e65c87eba4b04a7a

  • SHA512

    8e4e3b74f4ce9b2a4569d291c23763c3785f3582c199c3be75f462cc4cc01733b287161310733d5cf8c6301cfe25bbc28ebefacb4b944d6acb19fd2f04219111

  • SSDEEP

    3072:L5qpSYH/rb0G1zCObTntqxM5p4mLZAR8fWzP:6HeOHntqxM5Sm/QP

  Score

  10^/10

  formbookh2b0discoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral3behavioral4