Extracted

• • Target

    JaffaCakes118_17a6f526b20aa11aa8685b79176a440f

  • Size

    254KB

  • MD5

    17a6f526b20aa11aa8685b79176a440f

  • SHA1

    af265b6b633f1ae0d9e45b913649d4ea9ceb36f2

  • SHA256

    abb82e829e69a97f46c6a116d8c8996697508b9215bb3b2facac37156c4062d0

  • SHA512

    1ec0001680ca42e956a6dc4d051adeedd9ab07b8bea86674002dcc33f15d497eb7897194a2c5d9a456b72249a7ba3241660e8d6d6fbbbe53e77d4235bc1617af

  • SSDEEP

    6144:wBlL/caJNKQfAY5g28QFjaHWXJ4a2cqaplKYHPlFbfUwndzE0Ml:CeavTIYtjaH9cqklvP/dzE0Ml

  Score

  10^/10

  formbooks3dydiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/gtlbztpsztf.dll

  • Size

    49KB

  • MD5

    6432c43cc5cb60bb4a484470e8693ab3

  • SHA1

    78f0e1e34dbee0fee48d70949ff07deef94215bc

  • SHA256

    e21a1e1f87a1c05b1c97688f72fce20e5f1c42f8579b49d189b3e06f3be8a735

  • SHA512

    760c3906675ca690b23e195a7b4c295289dc6242e096ca3140fc199e41474fff7df0500243bde937e4e5ab311d2c4969f02b8b3d87b97bd26d3c3feee5a5ef6e

  • SSDEEP

    768:M57MzH3v2IihsP+l1nrk2IJ1/95UrpRxKZfUJXeykaxLT+QZv6qCGb:M57ohP+l1rktZ5qpWZf0XeyVxDd6/Gb

  Score

  10^/10

  formbooks3dydiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral3behavioral4