Extracted

• • Target
    ec5c6cbb0520bbaafb7338aa3cb0151e.exe
  • Size 870KB
  • SHA256 3571d3ca49f3c593d4b34f2d7bd9aa8ab2b0bfb99111a2a2561a0d25d494fa2f
  • MD5 ec5c6cbb0520bbaafb7338aa3cb0151e
  • SHA1 4c6618c895e8de40cf9df3e1e9ba74d2adfd2d0b
  • SHA512 cb345fda1c13c4c117b48fd489eeb635fa09028d0ef724a8263f6e7e9209f3c5e5c411a2bef6d3eb940b36c65289bc7c88b97aa09610eff37bb924ce099012e1
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2