Extracted

• • Target

    JaffaCakes118_8c0ee1047417c73e05ff20905963357e

  • Size

    830KB

  • MD5

    8c0ee1047417c73e05ff20905963357e

  • SHA1

    4870480c602168a6b0d5572810ca7289107df0d9

  • SHA256

    6d6ed63e357100a38b5bb4f4a256be07e34960bf25dbf0cc7d8f6b66e06d2df3

  • SHA512

    7005b8ffcb3837deb0f4e238ae60d8037c83e12d4b3e911efaba6d414e6c52deeef4cf2b8bf26bec2e720edd870ba2d4570a6ad92ce40db0037efac2b0c4c41e

  • SSDEEP

    24576:TLnGQYTq2UThCPIrkZZAF4tDc0eYOsUjzR:fxYT9/AkHAOtPWsazR

  Score

  10^/10

  formbookcb2kdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2