Extracted

• • Target
    Shipment Document BLINV And Packing List Attached.exe
  • Size 2.2MB
  • SHA256 69ed72dbf7e4439552b1e07760f02b1f005e6b6529c6666a8a971a0baa556fa8
  • MD5 3dd0d28b2e5f23d63d99de0b62a2ed45
  • SHA1 d3ff6dbc97ab7977682aa57462a08f25225230f7
  • SHA512 f726c2ee44bcf54a7e13442d35f09bafede67e832d42a69c3715a5084c238c1a28a962863fc6ca931150177e3629ad57e05acce9967d41fbbd6183dcac4a8468
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Blocklisted process makes network request

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2