Extracted

• • Target
    SKM_C3350191107102300.exe
  • Size 349KB
  • SHA256 574e414e22746d7781bd6ca6f4cc64be417b65696104dda71b037c9584cea01f
  • MD5 6f5d2b42f4a74886ac3284fa9a414a87
  • SHA1 c843fa55b16548ff0378194993e873a0b1b31a31
  • SHA512 098c318b5d87bb02ccf462f45e1eac3834a238be1363d53b3222d83fada64bddd5de3a3a8705bb1b6beea2fb269dac8cc7faacc79df6f412e7e7bf3997c0d328
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2