Extracted

• • Target

    JaffaCakes118_75510802638fd6742e1707285d816f08

  • Size

    527KB

  • MD5

    75510802638fd6742e1707285d816f08

  • SHA1

    800fa9c7db7a1ccfb9ad26c38bfb973828783f0e

  • SHA256

    7ad13f3353ceb15b4d751802829c239b0892f40ed4d56a1cda731ed44807f82a

  • SHA512

    dac12524898ce586f3279a571a97d960b5be17bb59d5d71fc3e8fcda1fa71a4a008d74e8502f85eae6211a7d03a54615562b21cdb52c7b0e4edb9f9950b4632e

  • SSDEEP

    12288:tUi2iNKH+n1GTbOz1P9SW3XmxVfTGhhmQc37oYDUCGPU96zC:tUi1w3Ti9lG/kEQcrZDUCGwqC

  Score

  10^/10

  formbookgd3ediscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2