Extracted

• • Target
    2503c1a18964e8152a8ea3205a864140.exe
  • Size 909KB
  • SHA256 90f2c4a6ef44f74b478893cdd505c759dbe924f984daf87726ba7e64edd091c4
  • MD5 2503c1a18964e8152a8ea3205a864140
  • SHA1 8b2fcfc7f0a8df3fcb5b3445b8488dbff68e64e6
  • SHA512 5fc5986be9aa0c269ba6e424a751cd57410f4731205c65f914b74efe8e641e77ccd5d9c3948440fe9abe61743a270f16bcda7b7c60f79760706762892d690f9f
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2