Extracted

• • Target

    JaffaCakes118_07207b80e453c29721f41336ff7b6c7d

  • Size

    578KB

  • MD5

    07207b80e453c29721f41336ff7b6c7d

  • SHA1

    dc94e0bfda65e54e4aafd101572c901f34b30a57

  • SHA256

    1cbe998f7bd486be77131f2ae65a73851ebb07daf542c5c15d0128b7c68ce497

  • SHA512

    dd0942141f77fa5e6547981ed401f1c109aadc4fc575819d0d83953e5e50bec46b4a87fbf0f91f3080882592e585009564cd33e8cd70230f482e404bf9b4153c

  • SSDEEP

    6144:VGxhLF2wIWKv70zC9zp39CsnvfQN130bXGuvHGC7fKSF1idc1jPhKbO:Ud2Xp70zCb3fnQUbWufGgfdmdc1j

  Score

  10^/10

  formbookgd3ediscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2