Extracted

• • Target

    90508db9aa3b3698eb08109217eb43b7.exe

  • Size

    1.0MB

  • MD5

    90508db9aa3b3698eb08109217eb43b7

  • SHA1

    f443522186cad995be2fce64a377bb1e01b49250

  • SHA256

    b28f4495e2cda5a5fef0408701a136d820c7cf2e7a45dd101e70b31458e31530

  • SHA512

    34f683a79d9bcef09a77dd2edf85015b540fd55cb2c709daa7363fa70518f30a6c99d48de7424ef551b8b13ce96dc6a472c319f1eddec2b4acaf2d0d8fb2f4aa

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2