Extracted

• • Target
    SecuriteInfo.com.Backdoor.MSIL.REMCOS.SM.16081
  • Size 575KB
  • SHA256 7cea909eb4fef13fdeee846b808200826a8de0292ba555bcc4fefdde642dbb55
  • MD5 a51090b0d67bcfd9babf526b6ba3a2cc
  • SHA1 1cb398c0a8ab1c99434507ecea29a72e790d34a5
  • SHA512 e5b224617b4efe587cc9e98f7b0c9477820faa5343473bff9febcb7bbb41beaf69cac74438b80da209070ab585021b120e157acbc90182cada0e3eea1e3a248b
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2