Extracted

• • Target

    JaffaCakes118_0a5598c0524673a5b76ffd4443e0500c

  • Size

    411KB

  • MD5

    0a5598c0524673a5b76ffd4443e0500c

  • SHA1

    fe9a504ed872fd509ca42b2b5eb379daaa25963a

  • SHA256

    75daef5818c03f31bc4aac93fd9cadeb30501c70d7063c65b72dcaed13e08b2c

  • SHA512

    178eae28f452806d7271f0e524973c04be5e39577a3aa3e05dffe34b1c24e1eb68b37cba4bc3a0266ce710c84dc0f857191667d874cb023232adf03527ee6155

  • SSDEEP

    6144:QYtUyFYBEx9LMwNRYIk9TAw/NwD63cCRf5AQ63HibYc2B:1tUyFYGpNRYlm4NwD63TRaQ63HibYPB

  Score

  10^/10

  formbooko6cwdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2