Extracted

• • Target

    JaffaCakes118_57e95002c65e37c937636d6a802ed998

  • Size

    492KB

  • MD5

    57e95002c65e37c937636d6a802ed998

  • SHA1

    347f51fc921f8a64b3134e2e7c6cb4ae35f991f6

  • SHA256

    9d8faf70b5732a7994ea4a5b49e0ee5ada032b0a03e2048de8ffe6da4e66c412

  • SHA512

    5af180e87a11a92345f85834b39eda2beb2843e7b9144b8f61ca69eb98064525b58a459685f612a312ea10ce09c331b28371607c2e9e602cbc5efab1f331413a

  • SSDEEP

    12288:vEKX6VyfIycnMz5VcMGGSwkkB2WdlEalS8z2m7:MUTrlVdGGS428ealS8zD

  Score

  10^/10

  formbookdn7rdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/xjujmofosc.dll

  • Size

    19KB

  • MD5

    ac0ac6a7d57e4fd3137b57ea17e15178

  • SHA1

    36f461a0cbc6a4561b08668c43e461b30dc462b8

  • SHA256

    b1d82a6fc8574306088346d467e59094a3ed933de4de3e4f7703664c34a84f82

  • SHA512

    31e39ca8118a3161f83c545241be617685992f09353daafbefaa16117b047b2eeb6ef0eb904957d02e93dfbbd46783d7c0d408dad62349f29cff53704e56b280

  • SSDEEP

    384:itICC1G8JstE8o/lkKU+VThlVTtAHTmicG:8ICC1LJTL97QTQ

  Score

  10^/10

  formbookdn7rdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral3behavioral4