Extracted

• • Target
    6rR1G3EcvT3djII.exe
  • Size 497KB
  • SHA256 9166caa8818f4cc62ac7922d901d396e17c0ff0867c48d52bd891b05121abafd
  • MD5 02eebb83231ac8e4ec8ced427b7a64a4
  • SHA1 5354a0047e2a26e0e7829ece3ba223478c490dda
  • SHA512 28dc4d300617129da2cb70a9659b39be497b61dadd7703584d6a9deff35ddbea0ac34c7d2fe9172b03523bed01f2bd768d4200970d95ba2a160d38a6b239eac4
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2