Extracted

• • Target
    rtgs_pdf.exe
  • Size 307KB
  • SHA256 b2f4176efc7fb22a1958f63af6f3029b8d4fdbecb98625828822d471a6a137b4
  • MD5 a27577cef313450cf362d2dae973c543
  • SHA1 a8841adc11f8846a494bc54940f4edb9d4cbecc0
  • SHA512 d4e64e48cd41405b8e72b808055ddd33a135f4e92f07710e08637fabcf9d6b40c7cab301cdd60e0902a461ae5da4bc4c2f334e0a1391716376e9e99bc47a718a
  • MD5 SHA1 SHA512

  Score

  10^/10

  formbookxloaderloaderratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Drops desktop.ini file(s)

  • Suspicious use of SetThreadContext

  behavioral1behavioral2