Extracted

• • Target

    JaffaCakes118_c6d40c961c2a1940c29ff433fc9217ee

  • Size

    427KB

  • MD5

    c6d40c961c2a1940c29ff433fc9217ee

  • SHA1

    a55d2f584620864fe9eb49e7647bb86fc2c20050

  • SHA256

    cf0d36f933310c07f1554db7e6e8a2e79c01ee933717e13f96ae841302306512

  • SHA512

    97c9df9f0492303c86a94e0fb25edac5cbd23e30cc4bcddc00ef47f7b70a7642da57f144bfa505a3ef0cad2de7f8d4fe464e58df931aeb54861e57c84f65fff7

  • SSDEEP

    6144:tBlL/ZgH+UQj3bLOj95PIDTOmuOsViEr6Bwh75FSPsGkdcR2K1tXuOE3u5y:biS3/sb2ONO8iErndSPhVtSd

  Score

  10^/10

  formbookdn7rdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    $PLUGINSDIR/brfrqelhtqi.dll

  • Size

    20KB

  • MD5

    08f8c05553706af957306d9cce346ebb

  • SHA1

    bc1ccb5f00c582752d4a5103b122fe5299dad8d4

  • SHA256

    628e6ecd0231ccdefd6d684a8d0f07ff16f0213ae04e29adb7ff94853cce2cc3

  • SHA512

    3dd9ea6672f45734931e194b066fe042a4d79e6cdd8a8999b874b7a4eaacf09d123e77d996be795b0d6e131fd9555e17fd4af445c1ad8c9a9cd3cb5f0ec1e0a1

  • SSDEEP

    384:XhdYW9jFrFH0SiNDTovgjztjlYew/CyYUidEI0aKjc:xdYmpBUh9j55RWCyYfEIBKA

  Score

  10^/10

  formbookdn7rdiscoveryratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook family

    formbook

  • Formbook payload

    rat

  • Suspicious use of SetThreadContext

  behavioral3behavioral4