Extracted

• • Target
    SecuriteInfo.com.Trojan.PackedNET.480.328.17095
  • Size 1.3MB
  • SHA256 cd1cdd19d3500f9947de10caa28d3fad75bc207faa10b7f9f7aab88c720dea1b
  • MD5 15d07663260b9486d5f978cbda3d4ba7
  • SHA1 c5113795462625025006eb1e575509cdf1cd2bf7
  • SHA512 22839c1f99953b2d84be33d3c6785f64f5431700f96254d7b8e425f9e20b7ce8f91a28fadb2f40b22f214d463b3de88b383d787381d4f26d27506696e5be4dc2
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2